last executing test programs: 21.402485142s ago: executing program 2 (id=257): r0 = fanotify_init(0x1a, 0x800) setns(0xc9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b15, &(0x7f00000005c0)={'wlan0\x00'}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r0, 0x441, 0x4800001a, r2, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) poll(&(0x7f0000000500)=[{r3, 0x1028}], 0x1, 0xfd) close_range(r3, 0xffffffffffffffff, 0x0) syz_open_dev$radio(&(0x7f0000000540), 0x0, 0x2) fanotify_mark(r0, 0x1, 0x20, r2, 0x0) syz_emit_ethernet(0x2fd, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0xe, 0x6, "493611", 0x2c7, 0x11, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, {[@srh={0x77, 0x4, 0x4, 0x2, 0x5, 0x18, 0x5, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1]}, @hopopts={0x29, 0x27, '\x00', [@generic={0x43, 0x86, "b31919fa99859dc42fc5b937f0fe9eef5a05da32e0260e648668ec2e8f26bc058111237ef278e858c3d698c911a0f6be4f68048d82eac3a60cc6ab19df5723281ce0455252a9168f59fdba5ed5c9fa2ad049dd171de4c9a3caf02a6a28f521adee9c9aec5c7bd0d069c15bfec9992be6b2a496ba2d82ae5ac41ea4b4d57772898620ba3bd32bf0c9c6482c76a861c1306a5d644f0a60235a5261d3ba52cac3450c9797c040c80f422904ddf5f0f02c11c26978523733e2b618a0958de396a96429ea7fb07984202591505462970c11d2ac5aa1068f585bde51df1a6e4fb63f41647e48cc4be72ca1d2aded890b790436983d639a"}, @calipso={0x7, 0x40, {0x0, 0xe, 0x8, 0x8, [0x3ff, 0xf85, 0x5, 0x9, 0x23e9, 0x6b2b, 0x7f]}}]}, @fragment={0x32, 0x0, 0x40, 0x1, 0x0, 0x4, 0x66}, @hopopts={0x2c, 0xf, '\x00', [@calipso={0x7, 0x48, {0x3, 0x10, 0x3, 0x5, [0xfffffffffffffffd, 0x9, 0x8000000000000000, 0x6, 0x3, 0xf, 0x5e, 0x4]}}, @hao={0xc9, 0x10, @mcast1}, @padn, @jumbo={0xc2, 0x4, 0x5}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @ra={0x5, 0x2, 0x7f}]}, @hopopts={0x3c, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}], {0x4e22, 0x4e23, 0xb7, 0x0, @gue={{0x2, 0x0, 0x0, 0x8, 0x0, @val=0x80}, "983ea5c18f511b2398da768336b763b704f8e8004a60f8dec9d1e99e86501888e5cad2418b90299ff0ecd39271ab94c2625e6f96b7a500d5e1df82afb16dc4d5d97f17cab79d688eea1715030181c464ea0c010d889b977df77c8e61064b65ccec94d5e4a11676a58ed47b7d5a22191d3f93fdac86b8d2147e90181089b51ea0a8d5a010fe6ded46d810dac433394df47daf890a6074798ee0c44c66e45acb848d4f6af0d9a59f"}}}}}}}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xa, 0x4}) prctl$PR_SET_THP_DISABLE(0x51, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f00000001c0)=[@acquire={0x40046305, 0x1}]}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000002c0)=[@acquire], 0xffffffffffffff67}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000400)={@ptr={0x66642a85, 0xfffffffd, 0x0, 0x0, 0x2, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000480), 0xec, 0x1, 0x26}, @fda={0x66646185, 0xc, 0x1, 0x3e}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x1040}]}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) ioctl$SG_GET_REQUEST_TABLE(r8, 0x2286, &(0x7f0000000900)) setns(r6, 0x20000000) ioctl$SIOCPNDELRESOURCE(r8, 0x89ef, &(0x7f0000000080)=0x3) 21.073170638s ago: executing program 2 (id=265): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/fib_multipath_hash_fields\x00', 0x1, 0x0) write(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000061116c00000000004600fe7f000000009500b00000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) r1 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x800) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000000c0)={0xe, @output={0x1000, 0x1, {0x401, 0xd}, 0x10001, 0x80}}) 21.022008921s ago: executing program 2 (id=266): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000003f00070113a769d500000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="0c0002800500230000000000080007"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000480), 0x101000, 0x0) getdents(r1, &(0x7f00000004c0)=""/165, 0xa5) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xac, r2, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1a6e5577}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff0d04}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x20040880) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/157, 0x9d, 0x1, &(0x7f00000001c0)=""/74, 0x4a}, &(0x7f0000000280)=0x40) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20028805}, 0x24000846) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000600)={0x0, 0xa1, &(0x7f0000000640)={&(0x7f0000000680)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r5, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x24000091) 20.912368113s ago: executing program 2 (id=271): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400088008"], 0x48}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2041, 0x0) write$sndseq(r2, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @quote={{0x23, 0x10}, 0x8}}, {0x0, 0x0, 0x0, 0xfc, @tick=0x8, {}, {0x5}, @connect={{0x8, 0x7}, {0x0, 0x3}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x100, {}, {}, @note={0x8, 0x7c, 0x4, 0xc, 0x4}}, {0x1, 0x0, 0x1, 0x0, @tick=0xbfffffff, {0x4, 0x21}, {0x7, 0x8}, @note={0x5, 0x2, 0x4, 0x5, 0xff}}], 0x70) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)={0x0, 0x0}) r5 = syz_io_uring_setup(0x80, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001000)=0x0, &(0x7f0000001040)=0x0, &(0x7f0000001080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000010c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x30, 0x0, 0x0, 0x40, 0x0, 0x0, {0x1}}) io_uring_enter(r5, 0x1, 0x1, 0x1, 0x0, 0x0) sendto$unix(r4, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000001140)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r5, 0x1, 0x1, 0x1, 0x0, 0x0) r9 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf32(r9, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x5, 0xa, 0x2, 0x100000000, 0x3, 0x6, 0xfff, 0x6570, 0x38, 0x2ac, 0x5, 0x1, 0x20, 0x3, 0x9, 0x8000, 0x1f00}, [{0x60000002, 0x3f2b70fc, 0x0, 0xbe, 0x2, 0x4, 0x42, 0x9}, {0x6, 0xffffffff, 0x6, 0x8, 0x10, 0x5, 0x0, 0x401}, {0x60000000, 0x2, 0x81, 0x3d1ce31e, 0x7f, 0x2, 0x1, 0xfffffff9}], "870e36f7e928f9aa9190d68a1a2dafadfa28725ae022560f9feb597229861129bc3a7553901f76b10cd81797e64921663b41b9410158e4098eb4a3cea69d348cdf", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xad9) getsockopt$inet_tcp_int(r1, 0x6, 0xa, 0x0, &(0x7f0000000040)) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = getuid() sendmsg$nl_xfrm(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=@newsa={0x1a0, 0x10, 0x1, 0x70bd2a, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, r11}, {@in, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xd75, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd25, 0x0, 0x0, 0x70bd28, 0xeaa}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x0) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000011c0)={0x1, &(0x7f0000001200)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r12, 0xffffffffffffffff, 0x0) r13 = openat$kvm(0x0, &(0x7f0000001240), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r14, 0x4020aed2, &(0x7f0000001280)={0xb000, 0x8000, 0x8}) r15 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r14, 0x40a0ae49, &(0x7f00000012c0)={0x7ff, 0x0, 0x0, r15}) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000401, r11, &(0x7f0000000f00)) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 20.702867818s ago: executing program 2 (id=275): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000640)={0x5, @sliced={0x5, [0x4, 0x5, 0xfffd, 0x6, 0x1, 0x6, 0x0, 0x3, 0x5, 0x1457, 0x0, 0x7ff, 0x8, 0x7, 0x5, 0xb, 0x3, 0xf72, 0x3, 0xfb91, 0x9e5, 0x3, 0x3ff, 0x6, 0x7fff, 0x8, 0x6, 0x1ff, 0x6, 0x33, 0x1, 0x513d, 0xbbb1, 0x6, 0x8, 0x5, 0x1, 0xa, 0x33ab, 0xffe, 0x1000, 0x7, 0xff, 0x1, 0x200, 0x4, 0x2, 0x7], 0x4}}) mkdir(&(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)="303132333a616263643a63ed7b188db386fd353596a17062fe01637654c85ba3a1dfc61bf255cc6e5b", 0x29) pipe2$9p(&(0x7f00000000c0), 0x80) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregs(0xe, r5, 0x100000001, &(0x7f0000000740)=""/242) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x8cd3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, {0xa, 0x4e21, 0x2, @private2, 0x59cf}, r2, 0x9}}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x90) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x40005, @loopback, 0x7}, {0xa, 0x4e22, 0xac, @empty, 0x8000}, r6, 0x8}}, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000840)=0x7) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xc4, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x59}}}}, [@NL80211_ATTR_MESH_SETUP={0x78, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x8}, @NL80211_MESH_SETUP_IE={0x48, 0x3, "893f756693c779ccdb0751e3b018953b340961ddb2f8c67cece08a1d03969030cf8ef08a2b968188d752a29f21f2346ea47284e50ad8ee22d40b69f8208daabb8540c219"}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8000}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xb0}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 20.698172423s ago: executing program 2 (id=276): openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x101882, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="f34df4977723247d25"], 0x9) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x800, 0x149) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x10) ppoll(&(0x7f0000000240)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 5.605419984s ago: executing program 32 (id=276): openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x101882, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="f34df4977723247d25"], 0x9) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x800, 0x149) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x10) ppoll(&(0x7f0000000240)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 2.691588698s ago: executing program 1 (id=492): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x1000200001ee0000, 0x3}) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000002240)='.\x00', 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) mbind(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1, 0x0, 0x2, 0x3) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x123200, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000002280)={'bond0\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000022c0)={0x6, 0x3, &(0x7f0000002380)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f00000023c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002400)={r6, r5, 0x25, 0x2, @void}, 0x10) r7 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000002100)='./binderfs/binder_logs/stats\x00', 0x0, 0x0) ioctl$FE_SET_PROPERTY(r7, 0x40106f52, &(0x7f00000021c0)={0x29, &(0x7f0000002140)=[{0x26, '\x00', @st={0x4, [{0x3, @svalue=0x1ff}, {0x0, @svalue=0x80000000}, {0x1, @uvalue=0xfc}, {0x2, @svalue=0x1a90}]}, 0x8}]}) read$FUSE(r3, &(0x7f00000000c0)={0x2020}, 0x2020) 2.25260111s ago: executing program 1 (id=496): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0x14, &(0x7f0000000f00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850097000100000095"], &(0x7f0000000fc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.247486929s ago: executing program 1 (id=499): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r2, &(0x7f0000002240)={0x90, 0xffffffffffffffda, r3, {0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, {0x2, 0xffff, 0x0, 0x0, 0x20000000000007f, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, r4, r5, 0x3, 0x5}}}, 0x90) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r4, &(0x7f0000002300)='./file0\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) close(0x3) 2.050571904s ago: executing program 1 (id=505): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x48, r2, 0x1, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {0x8}, @device_b, @device_a, @from_mac=@broadcast, {0x0, 0x400}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x3, 0xe, 0xf9}, @val={0x76, 0x6, {0x81, 0x1, 0x29}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc2}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x8a4, 0x4) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffff94, 0x34, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='bbr', 0x3) recvfrom$inet(r0, &(0x7f00000001c0)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) (async) recvfrom$inet(r0, &(0x7f00000001c0)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.550539703s ago: executing program 4 (id=510): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x50400, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x2d) r1 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x8000000, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffff00, 0x0, 'vcan0\x00', 'vlan0\x00', {}, {0xff}, 0x8, 0x2bbe86e5b28b8fc5, 0x30}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4081}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x15, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000a00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000a40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) pipe(&(0x7f0000000b80)={0xffffffffffffffff}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0x4}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, &(0x7f0000000c80)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff3e5, 0x80000000006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x2, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7f, 0x3, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x200000000, 0x1, 0x0, 0xfffffffffffffffe, 0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed9b, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x3, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0xfffffffe, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x5, 0x400000000, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, &(0x7f0000000200), &(0x7f0000000540)=""/164}, 0x20) mount(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='tmpfs\x00', 0x8, &(0x7f0000000100)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0x0, &(0x7f00000004c0)={0x8000000020004000, 0x6, 0x1000, 0x2f41b6a5, 0x1000, 0x1000008, 0xb, 0xfffffffffffff7fc, 0x100fff}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x740, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0881) ppoll(&(0x7f00000006c0)=[{r7, 0x1000}], 0x1, 0x0, 0x0, 0x0) write$sndseq(r7, 0x0, 0x0) 1.162810855s ago: executing program 1 (id=518): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2c, 0x25dfdbfe, {{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4e21, 0xd, 0x4e22, 0x3, 0x2, 0x80, 0x30, 0x2f}, {@in6=@mcast1, 0x4d2, 0x3c}, @in=@multicast1, {0xfff, 0x401, 0x5eae, 0x100000001, 0x8000000000000000, 0x3, 0x2005, 0x1ff}, {0x2, 0xf, 0x6b, 0x6}, {0x27c56102, 0x10000, 0x567e7bcc}, 0x70bd26, 0x3506, 0x2, 0x0, 0x9, 0x8}, 0x0, 0x8a53}}, 0xf8}}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)=@newtfilter={0x2c, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {0x8, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001100)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001540)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001500)={&(0x7f0000000980)=ANY=[@ANYBLOB="98030000", @ANYRES16=0x0, @ANYBLOB="080029bd7000fbdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="e801028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000800000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400080000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ff0700004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4001028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400e61a000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400fcffffff4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400ba04000008000600", @ANYRES32=r5, @ANYBLOB="893c2d53fcdb2320a11a793a857b816e8109c8191fef93a94439785c0044ade814ed1e7eed918658c3385a9cfa4f2ad7f64bae3425e0d6487264b47b1bfbd998b1b778f5c8adb480911705f5c96074afc337779f53793b1ccb281e6d9df4df520000000000000039335ff4b8a4a4a699a240601b9423662b298f4defe05bc91e2dad326f624e89f71e8fc802a51f6e51"], 0x398}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004001) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f0000000540)=0xfffffffffffffffa, 0x8) connect$vsock_stream(r6, &(0x7f0000000580)={0x28, 0x0, 0x0, @host}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000700)=0xffffffffffff7fff, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000150001002abd7000000000000a008342d594c33a79ca33130000"], 0x14}}, 0x20000800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}, 0x90) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r9, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) r10 = socket$inet(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r10, 0x0, 0x42, &(0x7f0000000380)={'ipvs\x00'}, &(0x7f0000000500)=0x1e) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = mq_open(&(0x7f0000000080)='bridge0\x00', 0x80, 0x10, &(0x7f0000000880)={0xe, 0x38e, 0x80000000, 0x200}) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f00000008c0)=0x0) mq_notify(r12, &(0x7f0000000900)={0x0, 0xb, 0x1, @tid=r13}) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000dc0)={0x78, 0x2, 0x6, 0x201, 0x6000000, 0x0, {0x5}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) r14 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r14, &(0x7f0000000440)={0x0, 0xfffffffffffffd2a, &(0x7f0000000480), 0x3}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="10080000", @ANYRES16=r3, @ANYBLOB="010026bd700000dcdf250700000008000300", @ANYRES32=r4, @ANYBLOB="0c009900ff0700004f0000001400040073797a6b616c6c65723100000000000008000500070000000a0018000303030303030000"], 0x50}, 0x1, 0x0, 0x0, 0x93}, 0x24044884) 1.092470756s ago: executing program 1 (id=522): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan1\x00'}) socket$nl_audit(0x10, 0x3, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) fsopen(&(0x7f0000000100)='udf\x00', 0x1) fanotify_init(0x81, 0x40000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180), 0x200002, 0x0) fchdir(r2) r3 = openat$cgroup_freezer_state(r2, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000200)='FROZEN\x00', 0x7) sendfile(r3, r3, 0x0, 0x8000002) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/cpu/vulnerabilities/tsx_async_abort\x00', 0x0, 0x0) read(r4, &(0x7f0000000340)=""/100, 0x64) timer_create(0x0, &(0x7f0000000400)={0x0, 0x11, 0x5, @thr={0x0, 0x0}}, &(0x7f0000000440)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) recvmmsg(r6, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x989680}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r1, @ANYRES16=r1, @ANYBLOB="0100004000", @ANYRES32=r1, @ANYRESHEX=r2], 0x28}, 0x1, 0x0, 0x0, 0x88002}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="1c00000022008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f00000002c0)="0c74c75350f4a590e15c61c7942348", 0xf}], 0x2, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000000)={0x2, 0xc2}, &(0x7f0000000040)=0x8) 831.741206ms ago: executing program 0 (id=527): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) read$dsp(r1, &(0x7f0000000140)=""/185, 0xb9) (async) ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000280)="8d522bd88978d6d9fa684ba45f4b69040000000000000032fee1eafd787035349f20c099125068891e3cb5c6dbf58781aa0921593372580b46e81765cf77883ded322a64d10ca039fdf03b9de5adc76a7e045518e0c962a6eeb35fff9a625e86ed8cc45ad3847d43300ba185363cbefc", 0x70}], 0x3}}], 0x1, 0x20d0) (async) r3 = dup(r2) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}]}, 0x5c}}, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaaae1, 0x23, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 831.119522ms ago: executing program 0 (id=528): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0x14, &(0x7f0000000f00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500a0000100000095"], &(0x7f0000000fc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 751.343526ms ago: executing program 0 (id=530): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x12}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000000), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000280)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000300), 0x4) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000340)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_clone(0x1100000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) (async) userfaultfd(0x801) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x12}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) (async) userfaultfd(0x801) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async) socket$netlink(0x10, 0x3, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000000), 0x0) (async) close(r3) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/net\x00') (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000280)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000300), 0x4) (async) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000340)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) syz_clone(0x1100000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 712.058469ms ago: executing program 4 (id=531): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000740)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000f88d00000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaacdaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x0) r2 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./mnt/trace_pipe\x00', 0x15) mount(0x0, &(0x7f00000009c0)='./mnt\x00', &(0x7f0000000a00)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x5a) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r3, &(0x7f0000000a80)=""/16384, 0x4000) sendmmsg(r2, &(0x7f00000009c0), 0x4000000000001f2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0x1, 0x0, &(0x7f00000004c0)) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x2010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) open(0x0, 0x311441, 0x4a) ioperm(0x0, 0x6e, 0xe) syz_clone(0x2c102400, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$dri(&(0x7f00000005c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000080)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000680)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r5, 0xc01864b1, &(0x7f0000000700)={r7, 0x2, 0x3, 0x0, 0x0}) lsm_set_self_attr(0x66, 0x0, 0x22, 0x0) socket$nl_route(0x10, 0x3, 0x0) 643.069527ms ago: executing program 0 (id=532): r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x6000090}, 0x4) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x79}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0x5555555555550101}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x11) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x84, @local, 0x4e21, 0x3, 'sh\x00', 0x9, 0xac8, 0x8}, 0x2c) (async, rerun: 64) r4 = socket$kcm(0xa, 0x2, 0x0) (rerun: 64) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f00000003c0)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@remote, 0x4e23, 0x3, 0x1c8, 0x12d63, 0x7}}, 0x44) (async) sendmsg$sock(r4, &(0x7f0000000440)={&(0x7f00000005c0)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000640)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 553.070842ms ago: executing program 3 (id=533): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000380)={0x27}, 0x74) mkdir(&(0x7f0000000000)='./file0\x00', 0x1e) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x73f0, 0x9}) chdir(&(0x7f0000000300)='./file1\x00') r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) read(r1, &(0x7f0000000340)=""/1, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x80240) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000240)={"00000016", 0x0, 0x6, 0x4, 0x7, 0x2, "f759ca34000400", '\t\x00', "03000500", '\x00', ["8bada940edffea0a0800", "c2fed6cb0200004000", "000011cedce100000000ef00", "00080001000000000100"]}) 552.514041ms ago: executing program 0 (id=534): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000400), 0x4e00, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@none, 0x7, 0x2, 0x3, "000f00", 0x38, 0xdc}]}}}, 0x13) ioctl$CDROMPLAYTRKIND(r0, 0x5304, &(0x7f0000000000)={0x0, 0xfe, 0xb, 0x3}) 472.873849ms ago: executing program 3 (id=535): r0 = socket(0x1, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x40, 0x0, 0x0, 0x40007, {{0x5, 0x4, 0x0, 0xb, 0x14, 0x64, 0x0, 0x28, 0x4, 0x0, @broadcast, @multicast2}}}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="e7ffffffffff"}) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x50) r4 = add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$KEYCTL_MOVE(0x1e, r4, r4, r5, 0x1) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0xc0, &(0x7f0000000300)=""/192, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x4, 0x4, 0x1ff, 0x8}, 0x10, 0x841b, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000440)=[{0x0, 0x4, 0x6, 0xc}, {0x5, 0x5, 0xe, 0x1}], 0x10, 0x6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r3}, &(0x7f00000004c0), &(0x7f0000000540)=r6}, 0x20) (async) sendmsg$kcm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748fdb8021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4040004) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f2, &(0x7f0000000500)={'syztnl1\x00', 0x0}) 252.916326ms ago: executing program 4 (id=536): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @empty}}, 0x24) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f00000004c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000800)=0x60, 0x2) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540), 0x50) sendmsg$can_j1939(r3, &(0x7f00000007c0)={&(0x7f0000000640)={0x1d, 0x0, 0x1, {0x1, 0xff}, 0x1}, 0x18, &(0x7f0000000780)={&(0x7f0000000680)="63d5c097d237a9a33f6e4575bd463288aacff083270450294affba34cf424521ea71674abe101c0de5125e7c578764d2616ad603c05d6d5cfca8a47c140a54e0dc9127cfaab42a02e0636582e17e8a42b7be242f69d5b51e8daa4c9c4dbfa8720f022ca44f1d1943d2d93e22649df7127ca34df1384e59e6c450fab829bd6da8aa2350c9be95caa6a5b0fc07c1f418226d4ecd71c2295945bf7d1f29df57235d26d7b4cbb412cbfab2aa65063accccec838350251616b23a39f1bb999e4466883f182b6a7956dd42cb5f00e888b1c71af2607b52dbbb771cc97ef5de71ea57ba206e1ec8054b9228e8386f973a2ff1cd1032e244f618f7", 0xf7}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r5, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000600)={r6, 0x0, 0x0}, 0x20) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000380)=0x1, 0x4) bind$can_j1939(r3, &(0x7f00000003c0)={0x1d, r4, 0x102030405060708, {}, 0x20}, 0x18) connect$can_j1939(r3, &(0x7f0000000500)={0x1d, r4, 0x1, {0x0, 0xff}, 0xfd}, 0x18) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000480)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x24) connect$can_j1939(r3, &(0x7f0000000400)={0x1d, r4, 0x0, {0x0, 0xee}, 0xff}, 0x18) getpeername(r3, 0x0, &(0x7f0000000440)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0x9}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x7, 0x5, 0x1}, @multicast2, @multicast2, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) write$tun(r2, &(0x7f0000000340)=ANY=[], 0xfdef) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xd) r10 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r10, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) 163.029217ms ago: executing program 3 (id=537): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x4, 0x20fff}) mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b29, &(0x7f0000000180)={'wlan1\x00'}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r2, 0x100000000) 83.209782ms ago: executing program 3 (id=538): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0x14, &(0x7f0000000f00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500a2000100000095"], &(0x7f0000000fc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 81.899548ms ago: executing program 4 (id=539): r0 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$sock(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a3377359800cb77206", 0x9}, {&(0x7f0000000040)="0aac596be50dd67ff2e9c371f6073cdd2304631603a7c83b8c2a82d6163c5050d41b3c97d5c2ac8d31e42da45e7316a068001a8196f2b275fb45566a58f11b013df0576cff4b162907700af94aaf370b", 0x50}], 0x2, &(0x7f0000000100)}}, {{&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3, 0x2, {0xa, 0x4e22, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}}, 0x80, &(0x7f0000000700)=[{&(0x7f00000001c0)="7788b732db872f5c609f3b8aa3b9abb8aca463b19bb365f428e9b494ab8aaf9dfcf52b18b6ed02b5f3d8c1098bba44883b3ab95fd1f25a7bce42a7e08c7465fac66d350cb463db6586c31439993e825b138406118a8f4149fb5421e3918141436405b236c8da859c8698b86f9e6ca87ed3f24f5a66ab27", 0x77}, {&(0x7f0000000240)="b5ca4192c0f70f0c15b63a15d4d9e94508132f7e1fb4f7cabe06ab2ddc3ee70ee121e79f85050127c7fd2f725b751d7ed0fb0040a3f6003921d6ec3cbc2a4f4679f4bd7733e2f10142d1b452fa621e5f78a545e7834a2247cbe28d1be792aecee62807dec75b2f5625edff6c2545150ab41a6f6fc5352861fb5e9c478ccdbcdfbee66d9f0392ddf3d0267e89e0ad3b6e03f64d45ca10f04499780af12c4bf04dbc8d6267a85216b93633f66f8fc27fbfa03094ad", 0xb4}, {&(0x7f0000000300)="44d878db7dbab6ef75f964363169fb7e811ad6f868c7acfc6668177be20855e8700844ab7096697065c9009b4ede8530837084b5e4aec6e4d135d089", 0x3c}, {&(0x7f0000000340)="3bb165fc093ff77b8232bdb9b17d999e75a06fcba1865623289391dbb60cbb2df2329f93bcb2f75e79b87034875cac0ef09ab8d667781786c38087d3db8969622d3429e7f0627182eb494f3f30be4a462e7493a1e2a3afc362779783a117e318f0c88034bb78c3f16a5b3c9ba9a9fe86f2ea83580d10f1feceff1fbb4443759c1edbe356d22d1183b92cab1d1a89f05c27dad6f6a4f3b1e5bfd8e0fcd6c40b03ddf31cd79789832a5d737903924807b4b66dc6f055cc404af33a2b4e99fa59fb761651ecc1a6a9549294692c7102b208d9cd79680a284bfc57d78705fa4809f2edb20e", 0xe3}, {&(0x7f0000000440)="f9ba1428ffec351e597fdd9fa3e3cbdacdf608abef6db947078b2a93340b381ad8d7af9965e05b387ca7d866ca1bea0bf4eb53433c4874f506d5d92eff41befb022565cf731d4f1c06819a283f54f698177e218df209730ab8bf92f6ac4266a8c112dbe46419541dcdcd67e06af1c276fef81aa3b8edacd83c1d397dcff94d092f16781841d815620ef325057ebb499051ac37736f6b19c95df551b1f12e85e94ed90caf20065a", 0xa7}, {&(0x7f0000000500)="c4e5d913c92da32f028a27ac5dbd80f19548b1c333601d012c38cd9e730aa7fd041fc5d12a91eba28ad618bfeb15932afb8250540c3c5eef19da62322c615689519b045158e6ecbf5e47aed89c3637db69d42c15af97f508dc15bdf4a5fddbe7e5bed88dc7fa553429181e4d32ff2e49c37618aed5f825", 0x77}, {&(0x7f0000000580)="3851d562991e4460c72b7bc7dc589650c9fa8e6ad9b8ebb1dea598a5c2e4614da7737adef08456f405f8aa85a8fe8ccde7efff5871eff2a26ceac58c0288e4eb8e8e58518fe842027b6126146fa5e311b5edf80000087fcddd7330baf1802bd75d6a6b4677b2bea949707fa32d57a909f3f8e5d18f0126c4983b6e41eecb65a7a8f6c8c5d84d8f098758a69c7011599483fc90c42c76abeecdca753baf8e7851ca586aa704ae6628ea9366e2248079c3bc6eb5562297c685548049ed8256fec771c268e99c", 0xc5}, {&(0x7f0000000680)="da5e64fe3b2dee3895a675a2fe746534f1d67e6a6aa5eb0a64c8628d935fb640cad008617db4e1bc1194b8b100b9db02956f164b25b3a8a31bb19539b3e5b78a676e7a164319f86f13d24c2e5d0f34964c88d1241c6eec007d3afc4173b2866519e9cde4a219bbe852a2bc84d0de3665321f9fa340bd278bba1c0d59d74f", 0x7e}], 0x8, &(0x7f0000000780)=[@mark={{0x14, 0x1, 0x24, 0xc6b7}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffd}}, @txtime={{0x18, 0x1, 0x3d, 0xa}}], 0x48}}, {{&(0x7f0000000800)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000880)="92271d264314ec52292a65198fd485c0105957b11b0080856a443b4cee0168af4bf5beadd7195d92945616df8f407433ca31313f7631a7c53d2b3521379d96f99d98ba9cd2d0c349479d44409e109b9ab9c96d328b8bc5deed3706ad6048b2d747dc0f3ef070be19c25a3e48ba0421996c3013b6c285e27e28a76703fe312663a9edae5b859e5fae05d9a0d3bf0102edaf89c06207c72963af6807de74abd9055cf35ba24034a2b8aeab38e7a56fbde37bb69ad91971341cdd86b37bc980c3ed7e2f79dcf89f976bb5", 0xc9}, {&(0x7f0000000980)="f919f5d869d645d8ec1c3ba29bc6a7445b30eb50c7d06c252ea96f7e211a43a2897b5957836f0844807b002d938b4dee826d420906926cda9aaf4ff67245e6b6958c158055600f0c269b85db45cb9650de1bd60ea4fce7e60a6d9069c76dbf9d7303700d935cabaca5d71a661161338a104932f55ea18f9babbda85984e675a6a1dbcaeea2a68cb381a35fc56f0c3680afe0fe6600617164fb5163136ef7bf5f54fdb8c431db600bcfb59d35c5b02809bdf5b3af12befa6b206a8991e45192fb6ae056a6dc6ca91d10dcc1f7748a2e201dad8458ec76fa82cbf063b0792e42654372e606f495890218e232171de39c0e6610d9", 0xf3}, {&(0x7f0000000a80)="1a623ca60493d21d5184832bfe78cf3b410d95a9a05146b8327f09443fa8800df2f66e26cf2059262d15bf7274044936e43f715c067fb3b867cb73ad97c84383ec4241c1efb2b3f9a436bc660f5bc5efe50e971f7f2e2dd877055638ccd2a7e11b2b197f73d46adb51cf15709ee14178552fbc6a4a49e53f7b721a72ef8f4cdc4ebbd2197f", 0x85}, {&(0x7f0000000b40)="4bfb0935ef77b9c5c160fa1dd9fa3a42d17c1223a45d16bfcdd0c76ef689efd525c55434a00fbf58138d657cd6ce57aa43ad60bcac04b9f08837242c47318cdb90b74931297ee143fe719cc830c7bd1973ca9801d9f33f97087b", 0x5a}, {&(0x7f0000000bc0)="0994b9cbcc30b8483e2259a9860e90cf51e77fdba3adf64a2de303d47973d7fcf4715c2b57", 0x25}, {&(0x7f0000000c00)="4693e23bdde81e252d3b39214fb6aa8ea7657d96c6acf557a52ae68bf2810c32ef314170f9bd98897f896105a2c09877d0f8a4d925731414b52aeca00d3a3191127ede5d05b475ddcc3967746eb77f548e8b3ecbddad2e8a35ca3dcb711f4b1136a8edb9074854220f9a1220ad0001c166b2ae9e83d82be96c6428e204ee73c973ff5421ce37d247137e2249cd684b3ff60a25a05c104a134c3f20f8660928a4fabe25ccf46c4d493b", 0xa9}, {&(0x7f0000000cc0)="03e12b42440ba73e1dfaf5e59e3b1647b6b0d1ca3f60649c2e0f3e925893c065a0017c2687", 0x25}, {&(0x7f0000000d00)="a92e4521b4ae32bf15a563ef7c9acc4a8a1e4e999516ca397aad2f1f489f93bea4d771a33d48a7de30a066ba7b09430ea32f100cc1a59a65e94dc637bb058d4e5c4772b0097fcd348b300c506a140e9ba7a26eedcc2f5807a99f05651e652cc43be9214802adcbc74814a79e6c6681a6f107a52b3299c6fa061d14946098994099acb809b0ea8bebf89ab5f723c9cc4c61864e7fd1eefcbcd5b55ff392449ae3282d18757c35c828e01f74060a9d96ed10e0dfaa9c25cbf455b2853c0df7eb9762902785fa0c2359053478a704e5ef34377b90784125b7264e9fd5fb4bdbd9", 0xdf}], 0x8, &(0x7f0000000e80)=[@txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x10000}}], 0x30}}, {{&(0x7f0000000ec0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000f40)="28a061161caf206e488f3267b3debb6ed6f0f4e04ce0d1d9c6083f5bf680aed2394ac1063c679c12f814d7896b3b908eaf4d3fdfa1b3202321ad40fae78b553fec4c6a746c927a33cf7642989c3651af1b764419ff04feeb2477396d23f297cd8c09", 0x62}, {&(0x7f0000000fc0)="1d8a", 0x2}, {&(0x7f0000001000)="778185fb253762e84387780fb2d2ccb8723082896f753f5fd4816f3afb1ac8049a9d8fc41e0d8ec75b2743d37629b8d1e644e90bdba1a2285d5da16093f957ddf3aab87aee3de1e74e25d4b494a1c0b797fedd3b6ae9789745feaf76bb6024f595d488c5d82f874398baeb54f14bd86df4bf628092118588073243b1cce26606c6437ef028469ab10ca43895e19a3a96efbdc73754563d35e6be325be4af2572b2a3f3bfbc77d5f213606b3d7e58418fa2b18afcac24ba15e7fe06ed3ce224da547f7cefe7b7fbdd", 0xc8}, {&(0x7f0000001100)="085b086042502c0f913f71b9f2924a86dfd01b19074b7c112f410611b68ccbd908c08a7262cfd65801d6532c", 0x2c}, {&(0x7f0000001140)="8adead2d30462ce89fe3083d317c859b5c4ca7a8d7155e8d4cbf75d2678131e31b36b489446ff6bad761ba0fdbf9dbddc57edd2a2ad4c54037f4ae6cd4c68261b59230bd9b68db65121e970baef393716b3c07366744aa2302bf238e434705b45198ef7e", 0x64}, {&(0x7f00000011c0)="45caa4837f901703ab7f5667c30550272e9b83ccf5441ba430532cee9d04e11dde4b4d792cc77dacd1ff8f125330e6d7b43f3ac6dda58d44503f1cbd0eb2af122586ef1774cb434083551f6cc48fd00fd76ee8156efd11000a4b029f0e80c78aafd4e302e09d6119cced3a25b8729d1b7a36a23e868df6291f597eedcfe882f767d365cdb3f1c5764fab5dda596058d229339a916aa672cda87bfa760819a4ca82b51470ac4320224a455cb8743570a222684db64187f283c102", 0xba}, {&(0x7f0000001280)="bdaf9ecac9dc4d251fa661d2973b5ad537856add452da1a65c456e476f40b2ada06c6d627689a4c9e319df8265b47d5535d5d5fe58a9ec2415af83958ff6c683ffdfc52f1f28f7857687ce7dc3046bbb36353a3cce3919c2df659973e57a702fc7a0edb6f3b9915bbc9f43e804c956a66feb2507ea26ef1b5524da4d319388693124908f2e2e78a8c5f3b31805d3be7ec649aeef60f0d9900b1142f0f9108090", 0xa0}], 0x7, &(0x7f00000013c0)=[@mark={{0x14, 0x1, 0x24, 0x1cc}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x81}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x90}}, {{&(0x7f0000001480)=@pppoe={0x18, 0x0, {0x3, @random="27bc0ae9d784", 'veth0_vlan\x00'}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001500)="12fcc6e9ef12675cbad238e5f953b897bc55547f61392ac22a1e2938823edc4e8aef1e114f05b11ecb72afc95e01bfe20ddbae5b094d0617b2f1e8b2685673dc82017c0d8733b25de911474f30ca24107043c6644cdcd00be07d6a6013e1ad9b61be74e261e61da09a4ae0e2369e9e985e6d12ee94fa5e07a86be9b4788daf2b2df0129e8849f5bcba435ef1c3a49a038de025aba12666213f01f87a3587f20e4a50372682329e0ee996468a39c9f0addb48934f51bcbbefcba704b0f4518288808e7994e3706aa80fbcc1", 0xcb}, {&(0x7f0000001600)="86e1e1523f1c6a3c5bb856c61f184ddb52589953d139a994bc04157593ec900d4d7295ed20d4313d8d667cead97e7249cad778fcc6aeb79c874e2a5ad9c917549bd0daea6aaeff5e0f795cc51e3b8507d37f216c2a388141d78cdcf70c635d3ab07a6a0426c150d692a747ebcc2eb72eea41d975ae1328bc3ecc8e029c458cc1b7ccafac35179ff2d9252a918c41c638e4c8daf3f8dbd4f920f12e2bc3c61887171d3e8326c298a26e10245c4dd942d75c4d372837ee3cba1a04687a02250e4dc534960a363f3f2fa63b2a01b39ea371450771ef", 0xd4}, {&(0x7f0000001700)="6a098001c166adf78abcc7e449a9e113a6474e927f253c51bcc9d0730b67bb46d73343be496a081bb088b7c2bd5db2aea64fcf4182a23cb6909c26cf9845f9adc5f9fbfb3fcbe96ef34a3e7ea13ef829", 0x50}], 0x3, &(0x7f00000017c0)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}}], 0x5, 0x40011) socket$pppl2tp(0x18, 0x1, 0x1) (async) sendmmsg$sock(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a3377359800cb77206", 0x9}, {&(0x7f0000000040)="0aac596be50dd67ff2e9c371f6073cdd2304631603a7c83b8c2a82d6163c5050d41b3c97d5c2ac8d31e42da45e7316a068001a8196f2b275fb45566a58f11b013df0576cff4b162907700af94aaf370b", 0x50}], 0x2, &(0x7f0000000100)}}, {{&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3, 0x2, {0xa, 0x4e22, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}}, 0x80, &(0x7f0000000700)=[{&(0x7f00000001c0)="7788b732db872f5c609f3b8aa3b9abb8aca463b19bb365f428e9b494ab8aaf9dfcf52b18b6ed02b5f3d8c1098bba44883b3ab95fd1f25a7bce42a7e08c7465fac66d350cb463db6586c31439993e825b138406118a8f4149fb5421e3918141436405b236c8da859c8698b86f9e6ca87ed3f24f5a66ab27", 0x77}, {&(0x7f0000000240)="b5ca4192c0f70f0c15b63a15d4d9e94508132f7e1fb4f7cabe06ab2ddc3ee70ee121e79f85050127c7fd2f725b751d7ed0fb0040a3f6003921d6ec3cbc2a4f4679f4bd7733e2f10142d1b452fa621e5f78a545e7834a2247cbe28d1be792aecee62807dec75b2f5625edff6c2545150ab41a6f6fc5352861fb5e9c478ccdbcdfbee66d9f0392ddf3d0267e89e0ad3b6e03f64d45ca10f04499780af12c4bf04dbc8d6267a85216b93633f66f8fc27fbfa03094ad", 0xb4}, {&(0x7f0000000300)="44d878db7dbab6ef75f964363169fb7e811ad6f868c7acfc6668177be20855e8700844ab7096697065c9009b4ede8530837084b5e4aec6e4d135d089", 0x3c}, {&(0x7f0000000340)="3bb165fc093ff77b8232bdb9b17d999e75a06fcba1865623289391dbb60cbb2df2329f93bcb2f75e79b87034875cac0ef09ab8d667781786c38087d3db8969622d3429e7f0627182eb494f3f30be4a462e7493a1e2a3afc362779783a117e318f0c88034bb78c3f16a5b3c9ba9a9fe86f2ea83580d10f1feceff1fbb4443759c1edbe356d22d1183b92cab1d1a89f05c27dad6f6a4f3b1e5bfd8e0fcd6c40b03ddf31cd79789832a5d737903924807b4b66dc6f055cc404af33a2b4e99fa59fb761651ecc1a6a9549294692c7102b208d9cd79680a284bfc57d78705fa4809f2edb20e", 0xe3}, {&(0x7f0000000440)="f9ba1428ffec351e597fdd9fa3e3cbdacdf608abef6db947078b2a93340b381ad8d7af9965e05b387ca7d866ca1bea0bf4eb53433c4874f506d5d92eff41befb022565cf731d4f1c06819a283f54f698177e218df209730ab8bf92f6ac4266a8c112dbe46419541dcdcd67e06af1c276fef81aa3b8edacd83c1d397dcff94d092f16781841d815620ef325057ebb499051ac37736f6b19c95df551b1f12e85e94ed90caf20065a", 0xa7}, {&(0x7f0000000500)="c4e5d913c92da32f028a27ac5dbd80f19548b1c333601d012c38cd9e730aa7fd041fc5d12a91eba28ad618bfeb15932afb8250540c3c5eef19da62322c615689519b045158e6ecbf5e47aed89c3637db69d42c15af97f508dc15bdf4a5fddbe7e5bed88dc7fa553429181e4d32ff2e49c37618aed5f825", 0x77}, {&(0x7f0000000580)="3851d562991e4460c72b7bc7dc589650c9fa8e6ad9b8ebb1dea598a5c2e4614da7737adef08456f405f8aa85a8fe8ccde7efff5871eff2a26ceac58c0288e4eb8e8e58518fe842027b6126146fa5e311b5edf80000087fcddd7330baf1802bd75d6a6b4677b2bea949707fa32d57a909f3f8e5d18f0126c4983b6e41eecb65a7a8f6c8c5d84d8f098758a69c7011599483fc90c42c76abeecdca753baf8e7851ca586aa704ae6628ea9366e2248079c3bc6eb5562297c685548049ed8256fec771c268e99c", 0xc5}, {&(0x7f0000000680)="da5e64fe3b2dee3895a675a2fe746534f1d67e6a6aa5eb0a64c8628d935fb640cad008617db4e1bc1194b8b100b9db02956f164b25b3a8a31bb19539b3e5b78a676e7a164319f86f13d24c2e5d0f34964c88d1241c6eec007d3afc4173b2866519e9cde4a219bbe852a2bc84d0de3665321f9fa340bd278bba1c0d59d74f", 0x7e}], 0x8, &(0x7f0000000780)=[@mark={{0x14, 0x1, 0x24, 0xc6b7}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffd}}, @txtime={{0x18, 0x1, 0x3d, 0xa}}], 0x48}}, {{&(0x7f0000000800)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000880)="92271d264314ec52292a65198fd485c0105957b11b0080856a443b4cee0168af4bf5beadd7195d92945616df8f407433ca31313f7631a7c53d2b3521379d96f99d98ba9cd2d0c349479d44409e109b9ab9c96d328b8bc5deed3706ad6048b2d747dc0f3ef070be19c25a3e48ba0421996c3013b6c285e27e28a76703fe312663a9edae5b859e5fae05d9a0d3bf0102edaf89c06207c72963af6807de74abd9055cf35ba24034a2b8aeab38e7a56fbde37bb69ad91971341cdd86b37bc980c3ed7e2f79dcf89f976bb5", 0xc9}, {&(0x7f0000000980)="f919f5d869d645d8ec1c3ba29bc6a7445b30eb50c7d06c252ea96f7e211a43a2897b5957836f0844807b002d938b4dee826d420906926cda9aaf4ff67245e6b6958c158055600f0c269b85db45cb9650de1bd60ea4fce7e60a6d9069c76dbf9d7303700d935cabaca5d71a661161338a104932f55ea18f9babbda85984e675a6a1dbcaeea2a68cb381a35fc56f0c3680afe0fe6600617164fb5163136ef7bf5f54fdb8c431db600bcfb59d35c5b02809bdf5b3af12befa6b206a8991e45192fb6ae056a6dc6ca91d10dcc1f7748a2e201dad8458ec76fa82cbf063b0792e42654372e606f495890218e232171de39c0e6610d9", 0xf3}, {&(0x7f0000000a80)="1a623ca60493d21d5184832bfe78cf3b410d95a9a05146b8327f09443fa8800df2f66e26cf2059262d15bf7274044936e43f715c067fb3b867cb73ad97c84383ec4241c1efb2b3f9a436bc660f5bc5efe50e971f7f2e2dd877055638ccd2a7e11b2b197f73d46adb51cf15709ee14178552fbc6a4a49e53f7b721a72ef8f4cdc4ebbd2197f", 0x85}, {&(0x7f0000000b40)="4bfb0935ef77b9c5c160fa1dd9fa3a42d17c1223a45d16bfcdd0c76ef689efd525c55434a00fbf58138d657cd6ce57aa43ad60bcac04b9f08837242c47318cdb90b74931297ee143fe719cc830c7bd1973ca9801d9f33f97087b", 0x5a}, {&(0x7f0000000bc0)="0994b9cbcc30b8483e2259a9860e90cf51e77fdba3adf64a2de303d47973d7fcf4715c2b57", 0x25}, {&(0x7f0000000c00)="4693e23bdde81e252d3b39214fb6aa8ea7657d96c6acf557a52ae68bf2810c32ef314170f9bd98897f896105a2c09877d0f8a4d925731414b52aeca00d3a3191127ede5d05b475ddcc3967746eb77f548e8b3ecbddad2e8a35ca3dcb711f4b1136a8edb9074854220f9a1220ad0001c166b2ae9e83d82be96c6428e204ee73c973ff5421ce37d247137e2249cd684b3ff60a25a05c104a134c3f20f8660928a4fabe25ccf46c4d493b", 0xa9}, {&(0x7f0000000cc0)="03e12b42440ba73e1dfaf5e59e3b1647b6b0d1ca3f60649c2e0f3e925893c065a0017c2687", 0x25}, {&(0x7f0000000d00)="a92e4521b4ae32bf15a563ef7c9acc4a8a1e4e999516ca397aad2f1f489f93bea4d771a33d48a7de30a066ba7b09430ea32f100cc1a59a65e94dc637bb058d4e5c4772b0097fcd348b300c506a140e9ba7a26eedcc2f5807a99f05651e652cc43be9214802adcbc74814a79e6c6681a6f107a52b3299c6fa061d14946098994099acb809b0ea8bebf89ab5f723c9cc4c61864e7fd1eefcbcd5b55ff392449ae3282d18757c35c828e01f74060a9d96ed10e0dfaa9c25cbf455b2853c0df7eb9762902785fa0c2359053478a704e5ef34377b90784125b7264e9fd5fb4bdbd9", 0xdf}], 0x8, &(0x7f0000000e80)=[@txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x10000}}], 0x30}}, {{&(0x7f0000000ec0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000f40)="28a061161caf206e488f3267b3debb6ed6f0f4e04ce0d1d9c6083f5bf680aed2394ac1063c679c12f814d7896b3b908eaf4d3fdfa1b3202321ad40fae78b553fec4c6a746c927a33cf7642989c3651af1b764419ff04feeb2477396d23f297cd8c09", 0x62}, {&(0x7f0000000fc0)="1d8a", 0x2}, {&(0x7f0000001000)="778185fb253762e84387780fb2d2ccb8723082896f753f5fd4816f3afb1ac8049a9d8fc41e0d8ec75b2743d37629b8d1e644e90bdba1a2285d5da16093f957ddf3aab87aee3de1e74e25d4b494a1c0b797fedd3b6ae9789745feaf76bb6024f595d488c5d82f874398baeb54f14bd86df4bf628092118588073243b1cce26606c6437ef028469ab10ca43895e19a3a96efbdc73754563d35e6be325be4af2572b2a3f3bfbc77d5f213606b3d7e58418fa2b18afcac24ba15e7fe06ed3ce224da547f7cefe7b7fbdd", 0xc8}, {&(0x7f0000001100)="085b086042502c0f913f71b9f2924a86dfd01b19074b7c112f410611b68ccbd908c08a7262cfd65801d6532c", 0x2c}, {&(0x7f0000001140)="8adead2d30462ce89fe3083d317c859b5c4ca7a8d7155e8d4cbf75d2678131e31b36b489446ff6bad761ba0fdbf9dbddc57edd2a2ad4c54037f4ae6cd4c68261b59230bd9b68db65121e970baef393716b3c07366744aa2302bf238e434705b45198ef7e", 0x64}, {&(0x7f00000011c0)="45caa4837f901703ab7f5667c30550272e9b83ccf5441ba430532cee9d04e11dde4b4d792cc77dacd1ff8f125330e6d7b43f3ac6dda58d44503f1cbd0eb2af122586ef1774cb434083551f6cc48fd00fd76ee8156efd11000a4b029f0e80c78aafd4e302e09d6119cced3a25b8729d1b7a36a23e868df6291f597eedcfe882f767d365cdb3f1c5764fab5dda596058d229339a916aa672cda87bfa760819a4ca82b51470ac4320224a455cb8743570a222684db64187f283c102", 0xba}, {&(0x7f0000001280)="bdaf9ecac9dc4d251fa661d2973b5ad537856add452da1a65c456e476f40b2ada06c6d627689a4c9e319df8265b47d5535d5d5fe58a9ec2415af83958ff6c683ffdfc52f1f28f7857687ce7dc3046bbb36353a3cce3919c2df659973e57a702fc7a0edb6f3b9915bbc9f43e804c956a66feb2507ea26ef1b5524da4d319388693124908f2e2e78a8c5f3b31805d3be7ec649aeef60f0d9900b1142f0f9108090", 0xa0}], 0x7, &(0x7f00000013c0)=[@mark={{0x14, 0x1, 0x24, 0x1cc}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x81}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x90}}, {{&(0x7f0000001480)=@pppoe={0x18, 0x0, {0x3, @random="27bc0ae9d784", 'veth0_vlan\x00'}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001500)="12fcc6e9ef12675cbad238e5f953b897bc55547f61392ac22a1e2938823edc4e8aef1e114f05b11ecb72afc95e01bfe20ddbae5b094d0617b2f1e8b2685673dc82017c0d8733b25de911474f30ca24107043c6644cdcd00be07d6a6013e1ad9b61be74e261e61da09a4ae0e2369e9e985e6d12ee94fa5e07a86be9b4788daf2b2df0129e8849f5bcba435ef1c3a49a038de025aba12666213f01f87a3587f20e4a50372682329e0ee996468a39c9f0addb48934f51bcbbefcba704b0f4518288808e7994e3706aa80fbcc1", 0xcb}, {&(0x7f0000001600)="86e1e1523f1c6a3c5bb856c61f184ddb52589953d139a994bc04157593ec900d4d7295ed20d4313d8d667cead97e7249cad778fcc6aeb79c874e2a5ad9c917549bd0daea6aaeff5e0f795cc51e3b8507d37f216c2a388141d78cdcf70c635d3ab07a6a0426c150d692a747ebcc2eb72eea41d975ae1328bc3ecc8e029c458cc1b7ccafac35179ff2d9252a918c41c638e4c8daf3f8dbd4f920f12e2bc3c61887171d3e8326c298a26e10245c4dd942d75c4d372837ee3cba1a04687a02250e4dc534960a363f3f2fa63b2a01b39ea371450771ef", 0xd4}, {&(0x7f0000001700)="6a098001c166adf78abcc7e449a9e113a6474e927f253c51bcc9d0730b67bb46d73343be496a081bb088b7c2bd5db2aea64fcf4182a23cb6909c26cf9845f9adc5f9fbfb3fcbe96ef34a3e7ea13ef829", 0x50}], 0x3, &(0x7f00000017c0)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}}], 0x5, 0x40011) (async) 79.637326ms ago: executing program 4 (id=540): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x7, "a5bbb0cddd7357346d20fea0231bf5cbf3fc84a6db3d1d208c7b0436ac9abf4c", 0xffffffffffffffff}) ioctl$NILFS_IOCTL_SYNC(r0, 0x80086e8a, &(0x7f0000000080)) mount(&(0x7f0000000500)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='jfs\x00', 0x2200010, 0x0) 79.414961ms ago: executing program 3 (id=541): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1a, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000070000001000000095"], 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x997}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x14, &(0x7f00000006c0)=ANY=[], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r3, 0x2000012, 0xe, 0xf0, &(0x7f00000007c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x8100, 0xe, 0x0, &(0x7f00000005c0)="c8e8a1aee95e10e19e00399da26f", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) r4 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x1, 0x2) ioctl$DVB_DEMUX_DMX_EXPBUF(r4, 0xc00c6f3e, &(0x7f0000000040)={0x2}) (async) r5 = syz_open_pts(0xffffffffffffffff, 0x40000) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000080)) (async) close_range(r1, r5, 0x0) 1.102395ms ago: executing program 0 (id=542): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000040)='1.2.0.\xb1\xc9\xf1\x9e\x15\x90\x9a\x04\xbd\xc8\xe1Bi\x051:\x9d\x98\xf0N\x84\x17\x95\x90\xean\xda8\xd4\xd1\xdb\x8ePw\xba\xf7\xa6Fi\xb5\x1f\x9a\v\xd5\xb8\x1f6789\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000140)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000540), 0x207, 0x82) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000580)={0x80, 0x6, 0xf00, 0x7, 0xec, 0x0, 0x0}) syz_open_dev$sndpcmp(0x0, 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000380), 0x0, 0x2) fsetxattr$security_evm(r3, &(0x7f0000000480), &(0x7f00000004c0)=ANY=[@ANYBLOB="02ee9a0000000000"], 0x8, 0x2) ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f00000003c0)={0x2c, &(0x7f0000000400)=[{0x22, '\x00', @buffer={"6852c330594dbd29bb41a2c8fb28081679aa50c4bd25ff4838a9c9dcbdfa2f75", 0x20}, 0x2009}]}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_debug_messages', 0x40, 0x80) ioctl$SNDRV_PCM_IOCTL_START(r6, 0x4142, 0x0) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0) write(r7, &(0x7f0000000340)="8d", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000500)='mount_timeout\x00', &(0x7f0000000600)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 871.23µs ago: executing program 3 (id=543): r0 = io_uring_setup(0x1, &(0x7f0000000680)={0x0, 0xfffffff8, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000700)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000780)={&(0x7f00000007c0), 0x1000}, &(0x7f0000000800)={&(0x7f0000000840), 0x1000, 0x1}}, 0x1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r0, 0x24, &(0x7f0000000880)={0x0, 0x2}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4, 0xffe}}}]}, 0x34}, 0x1, 0xba01}, 0x30008804) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000480)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f00000004c0)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000500)=@assoc_value={0x0}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000580)={r5, 0x6}, 0x8) r6 = socket(0x400000000010, 0x3, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r6) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r7, 0x212, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x34}}, 0x880) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40011}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x3, 0xa}, {0xa, 0xfff1}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041000) syz_emit_ethernet(0x86, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb0800450000780000907801000000470000000000000000110000000000ddffffffff430c0201ac1414bb4e210000443c0001e0000001000000000000000000000000ac1414000000000000000700000000000000000000000000ac1e007310000000ac14140000c728c2fe00"/138], 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x20, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a40)={r11, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r13 = dup(r12) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000a80)=@generic={0x0, r13}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r13, 0xc1205531, &(0x7f0000000ac0)={0x101, 0xae1, 0x80000000, 0x1, '\x00', '\x00', '\x00', 0x9, 0x80, 0x9, 0xfffffffb, "3701ac23ce801ed59b27abd5eb84d872"}) 0s ago: executing program 4 (id=544): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x63, @empty, 0x4007daa}, 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @address_reply={0x12, 0x0, 0x0, 0xe0000002}}}}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:62130' (ED25519) to the list of known hosts. [ 29.804861][ T42] audit: type=1400 audit(1792385322.453:116): avc: denied { name_bind } for pid=5639 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 31.516585][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 31.516598][ T42] audit: type=1400 audit(1792385324.163:119): avc: denied { write } for pid=5641 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.553020][ T42] audit: type=1400 audit(1792385324.193:120): avc: denied { write } for pid=5644 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.057619][ T42] audit: type=1400 audit(1792385324.703:121): avc: denied { mounton } for pid=5640 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.059213][ T42] audit: type=1400 audit(1792385324.703:122): avc: denied { mount } for pid=5640 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.061148][ T5640] cgroup: Unknown subsys name 'net' [ 32.062237][ T42] audit: type=1400 audit(1792385324.703:123): avc: denied { unmount } for pid=5640 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.247912][ T5640] cgroup: Unknown subsys name 'cpuset' [ 32.252874][ T5640] cgroup: Unknown subsys name 'rlimit' [ 32.278951][ T42] audit: type=1400 audit(1792385324.923:124): avc: denied { write } for pid=5648 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.315691][ T42] audit: type=1400 audit(1792385324.963:125): avc: denied { write } for pid=5651 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.464581][ T42] audit: type=1400 audit(1792385325.113:126): avc: denied { setattr } for pid=5640 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.465025][ T42] audit: type=1400 audit(1792385325.113:127): avc: denied { create } for pid=5640 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.465198][ T42] audit: type=1400 audit(1792385325.113:128): avc: denied { write } for pid=5640 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.517643][ T5655] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 33.302032][ T5640] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.688946][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 36.688964][ T42] audit: type=1400 audit(1792385329.333:154): avc: denied { execmem } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 36.951907][ T42] audit: type=1400 audit(1792385329.593:155): avc: denied { create } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.953293][ T42] audit: type=1400 audit(1792385329.593:156): avc: denied { read write } for pid=5723 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 36.953338][ T42] audit: type=1400 audit(1792385329.593:157): avc: denied { open } for pid=5723 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 36.959959][ T42] audit: type=1400 audit(1792385329.603:158): avc: denied { ioctl } for pid=5723 comm="syz-executor" path="socket:[7288]" dev="sockfs" ino=7288 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.982170][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.985118][ T5730] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.986675][ T5730] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.987282][ T5730] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.987957][ T5730] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.988229][ T5730] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.988996][ T5734] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.989080][ T5734] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.989682][ T5730] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.990174][ T5730] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.990625][ T5730] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.992946][ T5089] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.996438][ T5089] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.997772][ T5089] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.000507][ T42] audit: type=1400 audit(1792385329.643:159): avc: denied { read } for pid=5723 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.000549][ T42] audit: type=1400 audit(1792385329.643:160): avc: denied { open } for pid=5723 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.002886][ T42] audit: type=1400 audit(1792385329.643:161): avc: denied { mounton } for pid=5723 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 37.004050][ T5089] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.004709][ T5736] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.004857][ T5730] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.005697][ T5736] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.006591][ T5726] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.010387][ T42] audit: type=1400 audit(1792385329.653:162): avc: denied { module_request } for pid=5723 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 37.014886][ T5726] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.057547][ T42] audit: type=1400 audit(1792385329.703:163): avc: denied { sys_module } for pid=5723 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 37.208871][ T5728] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.209414][ T5733] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 37.217805][ T5723] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 37.219160][ T5728] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.219995][ T5728] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.230167][ T5725] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 37.320289][ T5728] infiniband rxe0: set active [ 37.321191][ T5728] infiniband rxe0: added rxe_eth0 [ 37.338451][ T24] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.343114][ T5728] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 37.343144][ T5728] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 37.343251][ T5728] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 37.360743][ T5728] RDS/IB: rxe0: added [ 37.360852][ T5728] smc: adding ib device rxe0 with port count 1 [ 37.360885][ T5728] smc: ib device rxe0 port 1 has no pnetid [ 37.371971][ T1041] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.382590][ T5728] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.516013][ T5728] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.637643][ T5723] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.637719][ T5723] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.637813][ T5723] bridge_slave_0: entered allmulticast mode [ 37.638748][ T5723] bridge_slave_0: entered promiscuous mode [ 37.642007][ T5723] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.642080][ T5723] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.642343][ T5723] bridge_slave_1: entered allmulticast mode [ 37.643515][ T5723] bridge_slave_1: entered promiscuous mode [ 37.644151][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.644227][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.644374][ T5733] bridge_slave_0: entered allmulticast mode [ 37.645155][ T5733] bridge_slave_0: entered promiscuous mode [ 37.683977][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.684043][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.684193][ T5733] bridge_slave_1: entered allmulticast mode [ 37.685400][ T5733] bridge_slave_1: entered promiscuous mode [ 37.697614][ T5725] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.697678][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.697827][ T5725] bridge_slave_0: entered allmulticast mode [ 37.698585][ T5725] bridge_slave_0: entered promiscuous mode [ 37.699618][ T5728] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.704582][ T5723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.704663][ T5725] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.704744][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.704807][ T5725] bridge_slave_1: entered allmulticast mode [ 37.705509][ T5725] bridge_slave_1: entered promiscuous mode [ 37.734057][ T5723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.744046][ T5725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.745837][ T5725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.749286][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.750646][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.768745][ T5723] team0: Port device team_slave_0 added [ 37.789516][ T5723] team0: Port device team_slave_1 added [ 37.790395][ T5733] team0: Port device team_slave_0 added [ 37.791769][ T5725] team0: Port device team_slave_0 added [ 37.792606][ T5733] team0: Port device team_slave_1 added [ 37.817736][ T5725] team0: Port device team_slave_1 added [ 37.818239][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.818248][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.818260][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.831057][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.831068][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.831081][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.834946][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.834955][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.834967][ T5723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.835881][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.835888][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.835900][ T5723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.836091][ T5728] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.847474][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.847484][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.847496][ T5725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.848415][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.848422][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.848434][ T5725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.888770][ T5725] hsr_slave_0: entered promiscuous mode [ 37.889211][ T5725] hsr_slave_1: entered promiscuous mode [ 37.894565][ T5723] hsr_slave_0: entered promiscuous mode [ 37.895008][ T5723] hsr_slave_1: entered promiscuous mode [ 37.895364][ T5723] debugfs: 'hsr0' already exists in 'hsr' [ 37.895412][ T5723] Cannot create hsr debugfs directory [ 37.923753][ T5733] hsr_slave_0: entered promiscuous mode [ 37.924697][ T5733] hsr_slave_1: entered promiscuous mode [ 37.925209][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 37.925226][ T5733] Cannot create hsr debugfs directory [ 38.195292][ T5723] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.200328][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.201333][ T5723] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.204660][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.205899][ T5723] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.208422][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.208818][ T5723] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.212045][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.292207][ T5723] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.292257][ T5723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.292597][ T5723] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.292720][ T5723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.302080][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.302140][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.302339][ T5728] bridge_slave_0: entered allmulticast mode [ 38.303070][ T5728] bridge_slave_0: entered promiscuous mode [ 38.306886][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.307054][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.307326][ T5728] bridge_slave_1: entered allmulticast mode [ 38.308598][ T5728] bridge_slave_1: entered promiscuous mode [ 38.336977][ T5725] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.339014][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.346997][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.347090][ T5725] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.350855][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.351298][ T5725] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.354855][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.355336][ T5725] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.359427][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.363142][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.392331][ T5728] team0: Port device team_slave_0 added [ 38.394203][ T5728] team0: Port device team_slave_1 added [ 38.421639][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.421651][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.421663][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.422992][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.423001][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.423013][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.435020][ T5725] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.435089][ T5725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.435251][ T5725] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.435323][ T5725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.440379][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.443042][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.460649][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.471858][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.499727][ T5733] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.501944][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.502349][ T5733] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.505261][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.518142][ T5728] hsr_slave_0: entered promiscuous mode [ 38.518654][ T5728] hsr_slave_1: entered promiscuous mode [ 38.518946][ T5728] debugfs: 'hsr0' already exists in 'hsr' [ 38.518957][ T5728] Cannot create hsr debugfs directory [ 38.520459][ T5733] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.522189][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.522547][ T5733] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.526016][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.546794][ T5723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.592019][ T5723] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.611669][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.611721][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.645610][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.645657][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.685098][ T5725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.705928][ T5725] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.715025][ T5728] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.717525][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.718170][ T5728] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.719722][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.726256][ T5728] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.727958][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.730459][ T5728] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.732237][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.733077][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.733119][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.740305][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.740381][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.757422][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.796421][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.801404][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.801450][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.814318][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.814363][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.841763][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.847038][ T5733] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.858173][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.863107][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.863170][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.867947][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.868017][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.979177][ T5723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.003693][ T5723] veth0_vlan: entered promiscuous mode [ 39.008182][ T5723] veth1_vlan: entered promiscuous mode [ 39.013271][ T5725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.037061][ T5723] veth0_macvtap: entered promiscuous mode [ 39.039110][ T5723] veth1_macvtap: entered promiscuous mode [ 39.055054][ T5725] veth0_vlan: entered promiscuous mode [ 39.062116][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.064384][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.067893][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.068141][ T5725] veth1_vlan: entered promiscuous mode [ 39.074136][ T5736] Bluetooth: hci3: command tx timeout [ 39.074365][ T5736] Bluetooth: hci0: command tx timeout [ 39.074484][ T5736] Bluetooth: hci2: command tx timeout [ 39.074532][ T5736] Bluetooth: hci1: command tx timeout [ 39.088468][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.094502][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.094605][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.105073][ T5725] veth0_macvtap: entered promiscuous mode [ 39.117916][ T5725] veth1_macvtap: entered promiscuous mode [ 39.149034][ T5733] veth0_vlan: entered promiscuous mode [ 39.157516][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.160958][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.160977][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.163963][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.165217][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.183698][ T5733] veth1_vlan: entered promiscuous mode [ 39.196324][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.196337][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.214410][ T5728] veth0_vlan: entered promiscuous mode [ 39.214684][ T5800] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.214774][ T5800] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.237481][ T5728] veth1_vlan: entered promiscuous mode [ 39.239062][ T5733] veth0_macvtap: entered promiscuous mode [ 39.244596][ T5733] veth1_macvtap: entered promiscuous mode [ 39.248533][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.248543][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.262483][ T5723] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.272769][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.272781][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.276147][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.280567][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.295854][ T5728] veth0_macvtap: entered promiscuous mode [ 39.300903][ T5728] veth1_macvtap: entered promiscuous mode [ 39.325776][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.339061][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.352738][ T203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.352752][ T203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.364519][ T62] IPVS: starting estimator thread 0... [ 39.394009][ T5800] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.394036][ T5800] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.394054][ T5800] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.394072][ T5800] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.398616][ T203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.398627][ T203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.415745][ T5885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5'. [ 39.415826][ T5885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.421725][ T5885] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.440770][ T203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.440786][ T203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.453376][ T5882] IPVS: using max 43 ests per chain, 103200 per kthread [ 39.456850][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.456866][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.479053][ T5887] ovs-system: entered promiscuous mode [ 39.488748][ T5892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5'. [ 39.489161][ T5800] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.489475][ T5800] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.489677][ T5800] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.489935][ T5800] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.490115][ T5800] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.490269][ T5800] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.490295][ T5800] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.538473][ T5901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 39.572017][ T5904] netlink: 'syz.3.4': attribute type 39 has an invalid length. [ 39.580234][ T5905] Zero length message leads to an empty skb [ 39.581038][ T5907] netlink: 'syz.2.9': attribute type 1 has an invalid length. [ 39.637716][ T5907] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 40.531815][ T5931] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14'. [ 40.534081][ T5924] ======================================================= [ 40.534081][ T5924] WARNING: The mand mount option has been deprecated and [ 40.534081][ T5924] and is ignored by this kernel. Remove the mand [ 40.534081][ T5924] option from the mount to silence this warning. [ 40.534081][ T5924] ======================================================= [ 40.548874][ T5924] No such timeout policy "syz1" [ 40.550010][ T5924] overlayfs: failed lookup in lower (newroot/3, name='file1', err=-40): overlapping layers [ 40.768219][ T5944] openvswitch: netlink: IP tunnel TTL not specified. [ 40.769332][ T5942] geneve1: entered allmulticast mode [ 40.771473][ T5942] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 40.793424][ T5846] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 40.836140][ T5948] jffs2: notice: (5948) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 40.931123][ T5957] netlink: ct family unspecified [ 40.936673][ T5957] ima: Unable to open file: / (-22) [ 40.937221][ T5956] ima: policy update failed [ 40.945843][ T5846] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 40.947279][ T5846] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 40.948839][ T5846] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 40.950662][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.950681][ T5846] usb 5-1: Product: syz [ 40.950693][ T5846] usb 5-1: Manufacturer: syz [ 40.950706][ T5846] usb 5-1: SerialNumber: syz [ 40.958865][ T5846] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 40.966918][ T5846] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 40.972993][ T5846] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 40.982968][ T5959] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20'. [ 40.992397][ T5959] bond0: (slave bond_slave_0): Releasing backup interface [ 41.056966][ T5959] bond_slave_0: entered promiscuous mode [ 41.056984][ T5959] bond_slave_0: entered allmulticast mode [ 41.114691][ T5971] bridge1: entered allmulticast mode [ 41.121553][ T5972] bridge2: entered allmulticast mode [ 41.163553][ T5734] Bluetooth: hci1: command tx timeout [ 41.163584][ T5734] Bluetooth: hci2: command tx timeout [ 41.163602][ T5734] Bluetooth: hci0: command tx timeout [ 41.196435][ T5978] netlink: 'syz.1.25': attribute type 2 has an invalid length. [ 41.196455][ T5978] netlink: 132 bytes leftover after parsing attributes in process `syz.1.25'. [ 41.204514][ T5978] veth1_macvtap: left promiscuous mode [ 41.209039][ T5981] netlink: 'syz.1.25': attribute type 2 has an invalid length. [ 41.209055][ T5981] netlink: 132 bytes leftover after parsing attributes in process `syz.1.25'. [ 41.293769][ T5992] tmpfs: Bad value for 'mpol' [ 41.319440][ T5996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28'. [ 41.597882][ T6016] netlink: 24 bytes leftover after parsing attributes in process `syz.3.31'. [ 41.633304][ T5736] Bluetooth: hci3: command tx timeout [ 41.667116][ T6024] binder_alloc: 6020: binder_alloc_buf, no vma [ 41.911727][ T42] kauditd_printk_skb: 123 callbacks suppressed [ 41.911740][ T42] audit: type=1400 audit(1792385334.553:287): avc: denied { create } for pid=6030 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 41.912342][ T42] audit: type=1400 audit(1792385334.553:288): avc: denied { ioctl } for pid=6030 comm="syz.2.33" path="socket:[11277]" dev="sockfs" ino=11277 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 41.963962][ T6031] : renamed from bridge_slave_0 (while UP) [ 42.079104][ T42] audit: type=1400 audit(1792385334.723:289): avc: denied { bind } for pid=6037 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.079514][ T42] audit: type=1400 audit(1792385334.723:290): avc: denied { write } for pid=6037 comm="syz.2.34" path="socket:[11351]" dev="sockfs" ino=11351 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.140604][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36'. [ 42.143893][ T42] audit: type=1400 audit(1792385334.793:291): avc: denied { read } for pid=6041 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 42.146559][ T6042] ip_tables: iptables: counters copy to user failed while replacing table [ 42.149284][ T42] audit: type=1400 audit(1792385334.793:292): avc: denied { mount } for pid=6041 comm="syz.2.36" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 42.151115][ T6042] rnbd_client L202: map_device: Unknown parameter or missing value 'se' [ 42.156238][ T42] audit: type=1400 audit(1792385334.803:293): avc: denied { create } for pid=6043 comm="syz.1.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.157339][ T42] audit: type=1400 audit(1792385334.803:294): avc: denied { write } for pid=6043 comm="syz.1.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.220898][ T42] audit: type=1400 audit(1792385334.863:295): avc: denied { unmount } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 42.244145][ T42] audit: type=1400 audit(1792385334.893:296): avc: denied { name_bind } for pid=6048 comm="syz.2.38" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 42.491590][ T6021] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 42.557782][ T6057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.558361][ T6057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.605446][ T6062] syz.2.40 uses obsolete (PF_INET,SOCK_PACKET) [ 42.793270][ T5805] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 42.857088][ T6088] rxe_eth0 speed is unknown, defaulting to 1000 [ 42.911637][ T6095] tmpfs: Bad value for 'mpol' [ 42.943242][ T5805] usb 8-1: Using ep0 maxpacket: 16 [ 42.944590][ T6087] rxe_eth0 speed is unknown, defaulting to 1000 [ 42.944771][ T5805] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 42.945927][ T5805] usb 8-1: config 1 interface 0 altsetting 11 bulk endpoint 0x1 has invalid maxpacket 1024 [ 42.945942][ T5805] usb 8-1: config 1 interface 0 altsetting 11 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 42.946003][ T5805] usb 8-1: config 1 interface 0 has no altsetting 0 [ 42.947703][ T5805] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.947714][ T5805] usb 8-1: Product:  [ 42.947721][ T5805] usb 8-1: Manufacturer: ⯉᪛苅던竘섓䠐疃췶䖡뮫鎶췴׫݉乯∫Ჲ㐲̪첩毁ң뗠举ፇ裲멺碪䅾讆퓝丢ꥡ䇿唩놗힚籮๓Ӵ䓄 [ 42.947732][ T5805] usb 8-1: SerialNumber: ៱갦顝ᰘ鞕⋻梹륐恅浗䇱빦⑟먐聗ﱴ谫棂登介歫ᵂ㥡᣹秒᮵磁Ꮚﯽ临뵖퉿恩씶g甽縇炫斈᷺̀냽㈊ᤎ⒍첬㢚忕┝廓菆ోൿ䓍ܵ溛Ѳ௬邊ठ瀄涵ྡ꿟갓⹫缗᜾኶⟲⤿꒯꿴쒘鬀ᅆȸ肯罴葯ឫ袭隆씢礇뇆ꢡ｀凷ῖ걮毼謹譏緡柔஀રᯚ눋⯲豁ꬎ릭︪伷፷槇 [ 42.951429][ T6056] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 43.005932][ T5931] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -110 [ 43.005957][ T5931] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -110 [ 43.006134][ T5931] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command (2), -32 [ 43.011718][ T24] usb 5-1: USB disconnect, device number 2 [ 43.038604][ T24] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 43.044265][ T24] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 43.044878][ T24] ti_usb_3410_5052 5-1:2.0: device disconnected [ 43.243425][ T5736] Bluetooth: hci0: command tx timeout [ 43.243451][ T5736] Bluetooth: hci2: command tx timeout [ 43.243464][ T5736] Bluetooth: hci1: command tx timeout [ 43.524896][ T6123] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 43.524920][ T6123] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 43.524992][ T6123] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 43.527104][ T6123] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 43.533005][ T6123] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 43.677198][ T5805] usb 8-1: USB disconnect, device number 2 [ 43.713480][ T5734] Bluetooth: hci3: command tx timeout [ 43.733922][ T6143] process 'syz.0.58' launched './file0' with NULL argv: empty string added [ 43.820261][ T6154] misc userio: No port type given on /dev/userio [ 43.863625][ T6151] x_tables: duplicate underflow at hook 1 [ 43.889950][ T6159] syzkaller0: entered promiscuous mode [ 43.889983][ T6159] syzkaller0: entered allmulticast mode [ 43.931047][ T6171] netlink: 'syz.2.70': attribute type 21 has an invalid length. [ 44.549079][ T6171] netlink: 'syz.2.70': attribute type 4 has an invalid length. [ 44.549093][ T6171] netlink: 'syz.2.70': attribute type 5 has an invalid length. [ 44.549101][ T6171] __nla_validate_parse: 6 callbacks suppressed [ 44.549107][ T6171] netlink: 3 bytes leftover after parsing attributes in process `syz.2.70'. [ 44.637772][ T6182] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 44.637868][ T6182] qnx6: wrong signature (magic) in superblock #1. [ 44.637873][ T6182] qnx6: unable to read the first superblock [ 44.657978][ T6184] netlink: 28 bytes leftover after parsing attributes in process `syz.0.76'. [ 44.683020][ T6188] ip_tables: iptables: counters copy to user failed while replacing table [ 44.691649][ T6190] Line length is too long: Should be less than 4094 [ 44.739735][ T6186] evm: overlay not supported [ 44.768991][ T6194] SELinux: policydb version 0 does not match my version range 15-35 [ 44.769050][ T6194] SELinux: failed to load policy [ 44.772868][ T6194] input: syz0 as /devices/virtual/input/input5 [ 44.859611][ T6201] netlink: 136 bytes leftover after parsing attributes in process `syz.3.82'. [ 44.921911][ T6213] netlink: 24 bytes leftover after parsing attributes in process `syz.0.88'. [ 44.927917][ T6213] netlink: 68 bytes leftover after parsing attributes in process `syz.0.88'. [ 45.025508][ T6225] mmap: syz.2.90 (6225) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 45.078529][ T6234] fuse: Bad value for 'fd' [ 45.303287][ T29] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 45.313416][ T5736] Bluetooth: hci1: command tx timeout [ 45.313438][ T5736] Bluetooth: hci2: command tx timeout [ 45.313450][ T5736] Bluetooth: hci0: command tx timeout [ 45.474294][ T29] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 45.475072][ T29] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 45.475092][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.475104][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.475115][ T29] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 45.475861][ T29] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 45.475872][ T29] usb 8-1: Manufacturer: syz [ 45.477221][ T29] usb 8-1: config 0 descriptor?? [ 45.887848][ T29] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 45.894915][ T29] appleir 0003:05AC:8243.0002: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 46.439977][ T6270] netlink: 32 bytes leftover after parsing attributes in process `syz.3.93'. [ 46.734464][ T6272] vlan2: entered allmulticast mode [ 46.734478][ T6272] bond0: entered allmulticast mode [ 46.734484][ T6272] bond_slave_0: entered allmulticast mode [ 46.734493][ T6272] bond_slave_1: entered allmulticast mode [ 46.834331][ T5734] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 46.875222][ T6281] team0 (unregistering): Port device team_slave_0 removed [ 46.877026][ T6281] team0 (unregistering): Port device team_slave_1 removed [ 46.962198][ T42] kauditd_printk_skb: 91 callbacks suppressed [ 46.962210][ T42] audit: type=1400 audit(1792385339.603:388): avc: denied { sqpoll } for pid=6288 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 47.015511][ T6292] FAULT_INJECTION: forcing a failure. [ 47.015511][ T6292] name failslab, interval 1, probability 0, space 0, times 1 [ 47.015538][ T6292] CPU: 3 UID: 0 PID: 6292 Comm: syz.1.109 Not tainted syzkaller #0 PREEMPT(full) [ 47.015557][ T6292] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 47.015566][ T6292] Call Trace: [ 47.015588][ T6292] [ 47.015595][ T6292] dump_stack_lvl+0x100/0x190 [ 47.015624][ T6292] should_fail_ex.cold+0x5/0xa [ 47.015647][ T6292] should_failslab+0xc2/0x120 [ 47.015672][ T6292] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 47.015691][ T6292] ? start_dirop+0x79/0xb0 [ 47.015714][ T6292] ? alloc_inode+0x68/0x250 [ 47.015734][ T6292] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 47.015775][ T6292] alloc_inode+0x68/0x250 [ 47.015801][ T6292] new_inode+0x22/0x1c0 [ 47.015820][ T6292] debugfs_create_dir+0xbe/0x440 [ 47.015841][ T6292] kvm_dev_ioctl+0x1286/0x1b50 [ 47.015870][ T6292] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 47.015893][ T6292] ? selinux_file_ioctl+0x13b/0x290 [ 47.015917][ T6292] ? selinux_file_ioctl+0xb6/0x290 [ 47.015941][ T6292] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 47.015962][ T6292] __x64_sys_ioctl+0x18e/0x210 [ 47.015984][ T6292] do_syscall_64+0x123/0x790 [ 47.016009][ T6292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.016026][ T6292] RIP: 0033:0x7feeb179e559 [ 47.016040][ T6292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.016055][ T6292] RSP: 002b:00007feeb25ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 47.016071][ T6292] RAX: ffffffffffffffda RBX: 00007feeb1a25fa0 RCX: 00007feeb179e559 [ 47.016082][ T6292] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000007 [ 47.016092][ T6292] RBP: 00007feeb1835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 47.016101][ T6292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.016110][ T6292] R13: 00007feeb1a26038 R14: 00007feeb1a25fa0 R15: 00007ffe85066c78 [ 47.016133][ T6292] [ 47.016140][ T6292] debugfs: out of free dentries, can not create directory '6292-8' [ 47.048634][ T6292] FAULT_INJECTION: forcing a failure. [ 47.048634][ T6292] name failslab, interval 1, probability 0, space 0, times 0 [ 47.048669][ T6292] CPU: 2 UID: 0 PID: 6292 Comm: syz.1.109 Not tainted syzkaller #0 PREEMPT(full) [ 47.048681][ T6292] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 47.048687][ T6292] Call Trace: [ 47.048700][ T6292] [ 47.048705][ T6292] dump_stack_lvl+0x100/0x190 [ 47.048735][ T6292] should_fail_ex.cold+0x5/0xa [ 47.048754][ T6292] should_failslab+0xc2/0x120 [ 47.048774][ T6292] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 47.048788][ T6292] ? start_dirop+0x79/0xb0 [ 47.048802][ T6292] ? alloc_inode+0x68/0x250 [ 47.048816][ T6292] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 47.048831][ T6292] alloc_inode+0x68/0x250 [ 47.048844][ T6292] new_inode+0x22/0x1c0 [ 47.048857][ T6292] __debugfs_create_file+0xfb/0x500 [ 47.048872][ T6292] debugfs_create_file_full+0x41/0x60 [ 47.048888][ T6292] kvm_dev_ioctl+0x1797/0x1b50 [ 47.048906][ T6292] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 47.048922][ T6292] ? selinux_file_ioctl+0x13b/0x290 [ 47.048938][ T6292] ? selinux_file_ioctl+0xb6/0x290 [ 47.048957][ T6292] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 47.048974][ T6292] __x64_sys_ioctl+0x18e/0x210 [ 47.048989][ T6292] do_syscall_64+0x123/0x790 [ 47.049010][ T6292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.049022][ T6292] RIP: 0033:0x7feeb179e559 [ 47.049032][ T6292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.049042][ T6292] RSP: 002b:00007feeb25ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 47.049057][ T6292] RAX: ffffffffffffffda RBX: 00007feeb1a25fa0 RCX: 00007feeb179e559 [ 47.049064][ T6292] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 47.049070][ T6292] RBP: 00007feeb1835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 47.049077][ T6292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.049083][ T6292] R13: 00007feeb1a26038 R14: 00007feeb1a25fa0 R15: 00007ffe85066c78 [ 47.049097][ T6292] [ 47.049102][ T6292] debugfs: out of free dentries, can not create file 'invlpg' [ 47.383335][ T6313] 9p: Unknown Cache mode or invalid value f [ 47.384214][ T42] audit: type=1400 audit(1792385340.033:389): avc: denied { ioctl } for pid=6312 comm="syz.1.113" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.513337][ T42] audit: type=1400 audit(1792385340.153:390): avc: denied { mount } for pid=6315 comm="syz.1.114" name="/" dev="configfs" ino=2122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 47.515281][ T42] audit: type=1400 audit(1792385340.163:391): avc: denied { search } for pid=6315 comm="syz.1.114" name="/" dev="configfs" ino=2122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 47.515323][ T42] audit: type=1400 audit(1792385340.163:392): avc: denied { search } for pid=6315 comm="syz.1.114" name="target" dev="configfs" ino=2205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 47.516776][ T42] audit: type=1400 audit(1792385340.163:393): avc: denied { write } for pid=6315 comm="syz.1.114" name="dbroot" dev="configfs" ino=9116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 47.516925][ T42] audit: type=1400 audit(1792385340.163:394): avc: denied { open } for pid=6315 comm="syz.1.114" path="/29/my_configfs/target/dbroot" dev="configfs" ino=9116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 47.530889][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.114'. [ 47.593256][ T42] audit: type=1400 audit(1792385340.233:395): avc: denied { write } for pid=6318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.638097][ T42] audit: type=1400 audit(1792385340.283:396): avc: denied { unmount } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 47.652941][ T42] audit: type=1400 audit(1792385340.293:397): avc: denied { write } for pid=6321 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.686414][ T6327] ubi0: attaching mtd0 [ 47.687203][ T6327] FAULT_INJECTION: forcing a failure. [ 47.687203][ T6327] name failslab, interval 1, probability 0, space 0, times 0 [ 47.687222][ T6327] CPU: 1 UID: 0 PID: 6327 Comm: syz.2.115 Not tainted syzkaller #0 PREEMPT(full) [ 47.687235][ T6327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 47.687243][ T6327] Call Trace: [ 47.687248][ T6327] [ 47.687253][ T6327] dump_stack_lvl+0x100/0x190 [ 47.687273][ T6327] should_fail_ex.cold+0x5/0xa [ 47.687290][ T6327] should_failslab+0xc2/0x120 [ 47.687308][ T6327] __kmalloc_flags_noprof+0x122/0x8e0 [ 47.687320][ T6327] ? __kmalloc_cache_node_noprof+0x30c/0x720 [ 47.687343][ T6327] ? do_kmem_cache_create+0x6fc/0x7a0 [ 47.687363][ T6327] do_kmem_cache_create+0x6fc/0x7a0 [ 47.687380][ T6327] ? __kmem_cache_create_args+0x1c3/0x430 [ 47.687401][ T6327] __kmem_cache_create_args+0x1e3/0x430 [ 47.687421][ T6327] ubi_attach+0x32a/0x4d30 [ 47.687441][ T6327] ? ubi_attach_mtd_dev+0x1429/0x3420 [ 47.687458][ T6327] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 47.687476][ T6327] ? __pfx_ubi_msg+0x10/0x10 [ 47.687492][ T6327] ? __pfx_ubi_attach+0x10/0x10 [ 47.687505][ T6327] ? lockdep_init_map_type+0x5c/0x250 [ 47.687521][ T6327] ? ubi_attach_mtd_dev+0x1429/0x3420 [ 47.687536][ T6327] ? __vmalloc_node_noprof+0xad/0xf0 [ 47.687553][ T6327] ? ubi_attach_mtd_dev+0x1429/0x3420 [ 47.687568][ T6327] ubi_attach_mtd_dev+0x1478/0x3420 [ 47.687589][ T6327] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 47.687603][ T6327] ? __pfx_get_mtd_device+0x10/0x10 [ 47.687623][ T6327] ctrl_cdev_ioctl+0x375/0x410 [ 47.687638][ T6327] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 47.687653][ T6327] ? selinux_file_ioctl+0x13b/0x290 [ 47.687669][ T6327] ? selinux_file_ioctl+0xb6/0x290 [ 47.687686][ T6327] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 47.687700][ T6327] __x64_sys_ioctl+0x18e/0x210 [ 47.687715][ T6327] do_syscall_64+0x123/0x790 [ 47.687734][ T6327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.687745][ T6327] RIP: 0033:0x7f752c59e559 [ 47.687781][ T6327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.687793][ T6327] RSP: 002b:00007f752d4bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 47.687805][ T6327] RAX: ffffffffffffffda RBX: 00007f752c826090 RCX: 00007f752c59e559 [ 47.687813][ T6327] RDX: 0000200000000200 RSI: 0000000040186f40 RDI: 0000000000000003 [ 47.687820][ T6327] RBP: 00007f752c635ab8 R08: 0000000000000000 R09: 0000000000000000 [ 47.687828][ T6327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.687835][ T6327] R13: 00007f752c826128 R14: 00007f752c826090 R15: 00007ffcb29bd638 [ 47.687850][ T6327] [ 47.687926][ T6327] __kmem_cache_create_args(ubi_aeb_slab_cache) failed with error -12 [ 47.687937][ T6327] CPU: 1 UID: 0 PID: 6327 Comm: syz.2.115 Not tainted syzkaller #0 PREEMPT(full) [ 47.687949][ T6327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 47.687955][ T6327] Call Trace: [ 47.687960][ T6327] [ 47.687964][ T6327] dump_stack_lvl+0x100/0x190 [ 47.687997][ T6327] __kmem_cache_create_args.cold+0x4c/0x6f [ 47.688015][ T6327] ubi_attach+0x32a/0x4d30 [ 47.688031][ T6327] ? ubi_attach_mtd_dev+0x1429/0x3420 [ 47.688047][ T6327] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 47.688064][ T6327] ? __pfx_ubi_msg+0x10/0x10 [ 47.688079][ T6327] ? __pfx_ubi_attach+0x10/0x10 [ 47.688092][ T6327] ? lockdep_init_map_type+0x5c/0x250 [ 47.688108][ T6327] ? ubi_attach_mtd_dev+0x1429/0x3420 [ 47.688121][ T6327] ? __vmalloc_node_noprof+0xad/0xf0 [ 47.688138][ T6327] ? ubi_attach_mtd_dev+0x1429/0x3420 [ 47.688152][ T6327] ubi_attach_mtd_dev+0x1478/0x3420 [ 47.688173][ T6327] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 47.688186][ T6327] ? __pfx_get_mtd_device+0x10/0x10 [ 47.688206][ T6327] ctrl_cdev_ioctl+0x375/0x410 [ 47.688221][ T6327] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 47.688236][ T6327] ? selinux_file_ioctl+0x13b/0x290 [ 47.688251][ T6327] ? selinux_file_ioctl+0xb6/0x290 [ 47.688268][ T6327] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 47.688283][ T6327] __x64_sys_ioctl+0x18e/0x210 [ 47.688297][ T6327] do_syscall_64+0x123/0x790 [ 47.688315][ T6327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.688331][ T6327] RIP: 0033:0x7f752c59e559 [ 47.688340][ T6327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.688350][ T6327] RSP: 002b:00007f752d4bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 47.688360][ T6327] RAX: ffffffffffffffda RBX: 00007f752c826090 RCX: 00007f752c59e559 [ 47.688368][ T6327] RDX: 0000200000000200 RSI: 0000000040186f40 RDI: 0000000000000003 [ 47.688375][ T6327] RBP: 00007f752c635ab8 R08: 0000000000000000 R09: 0000000000000000 [ 47.688381][ T6327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.688388][ T6327] R13: 00007f752c826128 R14: 00007f752c826090 R15: 00007ffcb29bd638 [ 47.688404][ T6327] [ 47.688746][ T6327] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -12 [ 47.744093][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.118'. [ 47.838569][ T6347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1284 sclass=netlink_route_socket pid=6347 comm=syz.2.119 [ 47.867618][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.120'. [ 47.999361][ T6367] netlink: 36 bytes leftover after parsing attributes in process `syz.1.125'. [ 47.999415][ T6368] netlink: 'syz.1.125': attribute type 1 has an invalid length. [ 48.000085][ T6366] jffs2: notice: (6366) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 48.004239][ T6373] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6373 comm=syz.1.125 [ 48.008977][ T6366] fuse: Bad value for 'fd' [ 48.011644][ T6368] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.079922][ T5839] usb 8-1: USB disconnect, device number 3 [ 48.199255][ T6399] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 48.199351][ T6399] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 48.212855][ T6396] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.238281][ T29] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.660055][ T6423] warning: `syz.1.139' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 48.788477][ T6426] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 48.933146][ T6458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.934426][ T6458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.012527][ T6465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 49.083546][ T6477] batadv0: entered promiscuous mode [ 49.084537][ T6477] macvlan2: entered promiscuous mode [ 49.084655][ T6477] macvlan2: entered allmulticast mode [ 49.084662][ T6477] batadv0: entered allmulticast mode [ 49.085664][ T6477] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 49.100959][ T6480] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 49.100972][ T6480] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 49.111565][ T6475] netlink: 'syz.0.153': attribute type 10 has an invalid length. [ 49.129761][ T6482] capability: warning: `syz.2.155' uses deprecated v2 capabilities in a way that may be insecure [ 49.132875][ T6482] FAULT_INJECTION: forcing a failure. [ 49.132875][ T6482] name fail_futex, interval 1, probability 0, space 0, times 1 [ 49.132894][ T6482] CPU: 3 UID: 0 PID: 6482 Comm: syz.2.155 Not tainted syzkaller #0 PREEMPT(full) [ 49.132907][ T6482] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.132913][ T6482] Call Trace: [ 49.132918][ T6482] [ 49.132922][ T6482] dump_stack_lvl+0x100/0x190 [ 49.132943][ T6482] should_fail_ex.cold+0x5/0xa [ 49.132960][ T6482] get_futex_key+0x1c9/0x13e0 [ 49.132980][ T6482] ? __pfx_get_futex_key+0x10/0x10 [ 49.132994][ T6482] ? futex_wake+0x4ea/0x5e0 [ 49.133010][ T6482] futex_wake+0xf4/0x5e0 [ 49.133021][ T6482] ? futex_wait+0x11e/0x370 [ 49.133035][ T6482] ? __pfx_futex_wake+0x10/0x10 [ 49.133049][ T6482] ? find_held_lock+0x2b/0x80 [ 49.133066][ T6482] ? __might_fault+0xc5/0x140 [ 49.133078][ T6482] ? __might_fault+0xc5/0x140 [ 49.133090][ T6482] do_futex+0x2b2/0x440 [ 49.133107][ T6482] ? __pfx_do_futex+0x10/0x10 [ 49.133123][ T6482] ? mntput+0x70/0xa0 [ 49.133139][ T6482] ? do_handle_open+0x2b9/0xf20 [ 49.133168][ T6482] __x64_sys_futex+0x34f/0x4d0 [ 49.133189][ T6482] ? __pfx___x64_sys_futex+0x10/0x10 [ 49.133211][ T6482] do_syscall_64+0x123/0x790 [ 49.133231][ T6482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.133244][ T6482] RIP: 0033:0x7f752c59e559 [ 49.133254][ T6482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.133264][ T6482] RSP: 002b:00007f752d4dd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 49.133276][ T6482] RAX: ffffffffffffffda RBX: 00007f752c825fa8 RCX: 00007f752c59e559 [ 49.133283][ T6482] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f752c825fac [ 49.133289][ T6482] RBP: 00007f752c825fa0 R08: 0000000000000001 R09: 0000000000000000 [ 49.133296][ T6482] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 49.133303][ T6482] R13: 00007f752c826038 R14: 00007ffcb29bd550 R15: 00007ffcb29bd638 [ 49.133320][ T6482] [ 49.164498][ T6488] capability: warning: `syz.1.158' uses 32-bit capabilities (legacy support in use) [ 49.257639][ T6493] overlayfs: missing 'lowerdir' [ 49.445970][ T6510] team0: entered promiscuous mode [ 49.445986][ T6510] team_slave_0: entered promiscuous mode [ 49.446123][ T6510] team_slave_1: entered promiscuous mode [ 49.446195][ T6510] team0: entered allmulticast mode [ 49.446203][ T6510] team_slave_0: entered allmulticast mode [ 49.446210][ T6510] team_slave_1: entered allmulticast mode [ 49.493271][ T6514] ip_tables: iptables: counters copy to user failed while replacing table [ 49.577435][ T6518] overlayfs: failed to resolve './file1': -2 [ 50.114010][ T41] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 50.266934][ T41] usb 7-1: Using ep0 maxpacket: 32 [ 50.267398][ T41] usb 7-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 50.272920][ T41] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 50.272938][ T41] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 50.272950][ T41] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 50.272962][ T41] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 50.292913][ T41] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.292928][ T41] usb 7-1: Product: syz [ 50.292935][ T41] usb 7-1: Manufacturer: syz [ 50.292942][ T41] usb 7-1: SerialNumber: syz [ 50.297810][ T41] usb 7-1: config 0 descriptor?? [ 50.301017][ T6540] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 50.303515][ T6561] __nla_validate_parse: 14 callbacks suppressed [ 50.303526][ T6561] netlink: 64 bytes leftover after parsing attributes in process `syz.1.173'. [ 50.303536][ T6561] netlink: 64 bytes leftover after parsing attributes in process `syz.1.173'. [ 50.330098][ T41] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input6 [ 50.340952][ C1] xpad 7-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 50.432763][ C1] xpad 7-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 50.510604][ T6561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.173'. [ 50.558640][ T5083] usb 7-1: USB disconnect, device number 2 [ 50.558758][ C1] xpad 7-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 50.597812][ T6486] CUSE: info not properly terminated [ 50.630822][ T6575] netlink: 'syz.3.176': attribute type 10 has an invalid length. [ 50.630846][ T6575] ipvlan0: entered allmulticast mode [ 50.630855][ T6575] veth0_vlan: entered allmulticast mode [ 50.634573][ T6575] team0: Device ipvlan0 failed to register rx_handler [ 51.206692][ T6600] bond0: option ad_select: unable to set because the bond device is up [ 51.307879][ T6613] netlink: 56 bytes leftover after parsing attributes in process `syz.2.191'. [ 51.336309][ T6617] xt_hashlimit: size too large, truncated to 1048576 [ 51.364257][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.190'. [ 51.534483][ T6652] ISOFS: Unable to identify CD-ROM format. [ 51.541589][ T6652] ISOFS: Unable to identify CD-ROM format. [ 51.618476][ T6667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62524 sclass=netlink_route_socket pid=6667 comm=syz.0.199 [ 51.671509][ T6672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.203'. [ 51.693254][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 51.823327][ T10] usb 8-1: device descriptor read/64, error -71 [ 51.929739][ T6692] netlink: 68 bytes leftover after parsing attributes in process `syz.0.208'. [ 51.966680][ T42] kauditd_printk_skb: 45 callbacks suppressed [ 51.966691][ T42] audit: type=1400 audit(1792385344.613:443): avc: denied { mounton } for pid=6693 comm="syz.0.209" path="/file0" dev="ramfs" ino=12536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 52.047218][ T42] audit: type=1400 audit(1792385344.693:444): avc: denied { write } for pid=6697 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.075424][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 52.088671][ T42] audit: type=1400 audit(1792385344.733:445): avc: denied { write } for pid=6703 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.089304][ T6705] jffs2: notice: (6705) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 52.118436][ T42] audit: type=1400 audit(1792385344.763:446): avc: denied { read } for pid=6711 comm="syz.0.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.121605][ T42] audit: type=1400 audit(1792385344.763:447): avc: denied { ioctl } for pid=6711 comm="syz.0.213" path="socket:[12541]" dev="sockfs" ino=12541 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.152313][ T6718] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 52.152491][ T6718] Error validating options; rc = [-22] [ 52.158813][ T6721] netlink: 'syz.1.215': attribute type 9 has an invalid length. [ 52.213257][ T10] usb 8-1: device descriptor read/64, error -71 [ 52.249259][ T42] audit: type=1400 audit(1792385344.893:448): avc: denied { create } for pid=6726 comm="syz.0.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.249439][ T6730] netlink: 'syz.0.217': attribute type 10 has an invalid length. [ 52.249451][ T6730] netlink: 40 bytes leftover after parsing attributes in process `syz.0.217'. [ 52.249573][ T42] audit: type=1400 audit(1792385344.893:449): avc: denied { ioctl } for pid=6726 comm="syz.0.217" path="socket:[13787]" dev="sockfs" ino=13787 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.250511][ T6727] batman_adv: batadv0: Adding interface: dummy0 [ 52.250519][ T6727] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.250532][ T6727] batman_adv: batadv0: Interface activated: dummy0 [ 52.250894][ T6730] batadv0: entered promiscuous mode [ 52.250904][ T6730] batadv0: entered allmulticast mode [ 52.251285][ T6730] bridge0: port 3(batadv0) entered blocking state [ 52.251372][ T6730] bridge0: port 3(batadv0) entered disabled state [ 52.252770][ T6730] bridge0: port 3(batadv0) entered blocking state [ 52.252838][ T6730] bridge0: port 3(batadv0) entered forwarding state [ 52.258046][ T6728] batadv0: mtu less than device minimum [ 52.258605][ T6728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 52.259097][ T6728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 52.259585][ T6728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 52.260115][ T6728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 52.260605][ T6728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 52.261091][ T6728] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 52.324050][ T10] usb usb8-port1: attempt power cycle [ 52.414361][ T5800] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 52.414381][ T5800] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 52.591285][ T6748] sctp: [Deprecated]: syz.0.223 (pid 6748) Use of struct sctp_assoc_value in delayed_ack socket option. [ 52.591285][ T6748] Use struct sctp_sack_info instead [ 52.683884][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 52.713779][ T10] usb 8-1: device descriptor read/8, error -71 [ 52.963366][ T10] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 52.984303][ T10] usb 8-1: device descriptor read/8, error -71 [ 53.067716][ T42] audit: type=1400 audit(1792385345.713:450): avc: denied { write } for pid=6755 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.104360][ T10] usb usb8-port1: unable to enumerate USB device [ 53.112106][ T42] audit: type=1400 audit(1792385345.753:451): avc: denied { write } for pid=6758 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.219320][ T42] audit: type=1400 audit(1792385345.863:452): avc: denied { ioctl } for pid=6761 comm="syz.0.224" path="socket:[15559]" dev="sockfs" ino=15559 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 53.468220][ T6776] loop5: detected capacity change from 0 to 7 [ 53.478121][ T6776] loop5: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 53.478169][ T6776] loop5: partition table partially beyond EOD, truncated [ 53.792902][ T6797] kAFS: unable to lookup cell '.' [ 53.794640][ T6797] IPv6: Can't replace route, no match found [ 53.887710][ T6801] fuse: Bad value for 'fd' [ 54.051016][ T5738] udevd[5738]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 54.056078][ T5744] udevd[5744]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 54.058384][ T5731] udevd[5731]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 54.060947][ T5741] udevd[5741]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 54.061825][ T5727] udevd[5727]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 54.094111][ T6809] udevd[6809]: inotify_add_watch(7, /dev/loop5p8, 10) failed: No such file or directory [ 54.101718][ T6810] udevd[6810]: inotify_add_watch(7, /dev/loop5p9, 10) failed: No such file or directory [ 54.114786][ T6808] udevd[6808]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 54.122092][ T5744] udevd[5744]: inotify_add_watch(7, /dev/loop5p19, 10) failed: No such file or directory [ 54.122523][ T5738] udevd[5738]: inotify_add_watch(7, /dev/loop5p20, 10) failed: No such file or directory [ 54.162673][ T6817] net_ratelimit: 13 callbacks suppressed [ 54.162686][ T6817] ip_tables: iptables: counters copy to user failed while replacing table [ 54.170217][ T6817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.238'. [ 54.190186][ T6817] Bluetooth: MGMT ver 1.23 [ 54.204560][ T6817] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 54.489232][ T6828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.240'. [ 54.489315][ T6828] netlink: Unknown conntrack attr (0) [ 54.505300][ T6828] usb3503 0-0008: unknown mode is requested [ 54.505314][ T6828] usb3503 0-0008: usb3503_probe: probed in standby mode [ 54.508687][ T6828] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 54.655122][ T6838] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 54.655303][ T6839] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 54.747944][ T6848] overlayfs: failed to clone upperpath [ 54.834500][ T5734] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 54.891837][ T6871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=6871 comm=syz.2.252 [ 54.924127][ T6876] Could not find key with description: [syz] [ 54.924138][ T6876] process_request_key_err: No key [ 54.924142][ T6876] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 54.924147][ T6876] One or more global auth toks could not properly register; rc = [-2] [ 54.924167][ T6876] Error validating options; rc = [-2] [ 54.991907][ T6889] xt_hashlimit: overflow, rate too high: 1 [ 55.007485][ T6891] netlink: 'syz.1.259': attribute type 12 has an invalid length. [ 55.031628][ T6893] binder: BINDER_SET_CONTEXT_MGR already set [ 55.031658][ T6893] binder: 6884:6893 ioctl 4018620d 200000000240 returned -16 [ 55.076445][ T6889] xt_hashlimit: overflow, rate too high: 1 [ 55.145871][ T6906] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 55.196093][ T6909] loop5: detected capacity change from 0 to 4095 [ 55.199051][ T6909] macvtap0: entered allmulticast mode [ 55.199070][ T6909] veth0_macvtap: entered allmulticast mode [ 55.215235][ T6816] Buffer I/O error on dev loop5, logical block 511, async page read [ 55.244833][ T6909] nvme_fabrics: missing parameter 'transport=%s' [ 55.244851][ T6909] nvme_fabrics: missing parameter 'nqn=%s' [ 55.281991][ T6909] Buffer I/O error on dev loop5, logical block 511, async page read [ 55.358917][ T6920] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.364111][ T6918] netlink: 'syz.2.266': attribute type 2 has an invalid length. [ 55.373623][ T6918] : entered promiscuous mode [ 55.446987][ T6937] dlm: no local IP address has been set [ 55.447001][ T6937] dlm: cannot start dlm midcomms -107 [ 55.584010][ T6953] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 55.818645][ T6963] MINIX-fs: blocksize too small for device [ 56.404985][ T7000] netlink: 'syz.1.287': attribute type 10 has an invalid length. [ 56.419355][ T7000] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 56.540188][ T7004] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 56.586981][ T7009] __nla_validate_parse: 2 callbacks suppressed [ 56.587015][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'. [ 56.632289][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.291'. [ 56.632309][ T7011] netlink: 24 bytes leftover after parsing attributes in process `syz.0.291'. [ 56.632921][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.291'. [ 56.634395][ T7011] bridge0: port 3(batadv0) entered disabled state [ 56.641643][ T7011] bridge_slave_1: left allmulticast mode [ 56.641670][ T7011] bridge_slave_1: left promiscuous mode [ 56.641861][ T7011] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.652867][ T7011] bridge_slave_0: left allmulticast mode [ 56.652889][ T7011] bridge_slave_0: left promiscuous mode [ 56.653127][ T7011] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.704048][ T7013] FAULT_INJECTION: forcing a failure. [ 56.704048][ T7013] name failslab, interval 1, probability 0, space 0, times 0 [ 56.704079][ T7013] CPU: 2 UID: 0 PID: 7013 Comm: syz.3.292 Not tainted syzkaller #0 PREEMPT(full) [ 56.704099][ T7013] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.704108][ T7013] Call Trace: [ 56.704128][ T7013] [ 56.704136][ T7013] dump_stack_lvl+0x100/0x190 [ 56.704174][ T7013] should_fail_ex.cold+0x5/0xa [ 56.704199][ T7013] should_failslab+0xc2/0x120 [ 56.704230][ T7013] __kmalloc_noprof+0xfc/0x840 [ 56.704254][ T7013] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 56.704281][ T7013] kernfs_fop_write_iter+0x26a/0x5f0 [ 56.704307][ T7013] vfs_write+0x6af/0x1050 [ 56.704329][ T7013] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 56.704353][ T7013] ? __pfx_vfs_write+0x10/0x10 [ 56.704371][ T7013] ? find_held_lock+0x2b/0x80 [ 56.704413][ T7013] ksys_write+0x12a/0x250 [ 56.704433][ T7013] ? __pfx_ksys_write+0x10/0x10 [ 56.704460][ T7013] do_syscall_64+0x123/0x790 [ 56.704494][ T7013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.704512][ T7013] RIP: 0033:0x7f569e39e559 [ 56.704526][ T7013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.704542][ T7013] RSP: 002b:00007f569f1bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 56.704559][ T7013] RAX: ffffffffffffffda RBX: 00007f569e625fa0 RCX: 00007f569e39e559 [ 56.704570][ T7013] RDX: 0000000000000003 RSI: 0000200000000840 RDI: 0000000000000007 [ 56.704581][ T7013] RBP: 00007f569e435ab8 R08: 0000000000000000 R09: 0000000000000000 [ 56.704590][ T7013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.704600][ T7013] R13: 00007f569e626038 R14: 00007f569e625fa0 R15: 00007ffe7e45a198 [ 56.704625][ T7013] [ 56.708481][ T7013] syzkaller1: entered promiscuous mode [ 56.708499][ T7013] syzkaller1: entered allmulticast mode [ 56.838731][ T7020] ip_tables: iptables: counters copy to user failed while replacing table [ 56.840022][ T7020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.295'. [ 56.936486][ T5734] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1 [ 56.938627][ T7026] netlink: 'syz.0.297': attribute type 180 has an invalid length. [ 57.013628][ T5800] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 57.013684][ T5800] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 57.013702][ T5800] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 57.013754][ T5800] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 57.538822][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 57.538840][ T42] audit: type=1400 audit(1792385350.183:480): avc: denied { unmount } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 57.554196][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.300'. [ 57.591866][ T42] audit: type=1400 audit(1792385350.233:481): avc: denied { name_bind } for pid=7038 comm="syz.3.301" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 57.593921][ T7037] team_slave_0 (unregistering): left promiscuous mode [ 57.593937][ T7037] team_slave_0 (unregistering): left allmulticast mode [ 57.600921][ T7037] team0: Port device team_slave_0 removed [ 57.751536][ T42] audit: type=1400 audit(1792385350.393:482): avc: denied { write } for pid=7049 comm="syz.1.306" name="/" dev="9p" ino=72614021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.751589][ T42] audit: type=1400 audit(1792385350.393:483): avc: denied { add_name } for pid=7049 comm="syz.1.306" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.751626][ T42] audit: type=1400 audit(1792385350.393:484): avc: denied { associate } for pid=7049 comm="syz.1.306" name="cpuset.effective_cpus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 57.780113][ T42] audit: type=1400 audit(1792385350.423:485): avc: denied { append } for pid=7049 comm="syz.1.306" path="/80/file0/cpuset.effective_cpus" dev="9p" ino=72614099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.783471][ T42] audit: type=1400 audit(1792385350.423:486): avc: denied { getopt } for pid=7051 comm="syz.0.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.375997][ T42] audit: type=1400 audit(1792385351.023:487): avc: denied { write } for pid=7056 comm="syz.0.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.383255][ T5800] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.453072][ T42] audit: type=1400 audit(1792385351.093:488): avc: denied { map } for pid=7060 comm="syz.3.311" path="socket:[16159]" dev="sockfs" ino=16159 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 58.491370][ T42] audit: type=1400 audit(1792385351.133:489): avc: denied { read } for pid=7060 comm="syz.3.311" name="event0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 58.517711][ T7067] overlayfs: failed to clone upperpath [ 58.564346][ T5734] Bluetooth: hci1: Invalid handle: 0x84c1 > 0x0eff [ 58.953813][ T63] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 59.103262][ T63] usb 8-1: Using ep0 maxpacket: 32 [ 59.103819][ T63] usb 8-1: New USB device found, idVendor=1bac, idProduct=0304, bcdDevice= 0.00 [ 59.104644][ T63] usb 8-1: too many endpoints for config 0 interface 0 altsetting 6: 255, using maximum allowed: 30 [ 59.104665][ T63] usb 8-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.104678][ T63] usb 8-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 59.104691][ T63] usb 8-1: config 0 interface 0 has no altsetting 0 [ 59.104705][ T63] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.108473][ T63] usb 8-1: config 0 descriptor?? [ 59.311985][ T7061] MTD: Couldn't look up '/dev/sg0': -15 [ 59.323822][ T63] usbhid 8-1:0.0: can't add hid device: -71 [ 59.323877][ T63] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 59.332685][ T63] usb 8-1: USB disconnect, device number 8 [ 59.574036][ T5800] net_ratelimit: 16 callbacks suppressed [ 59.574066][ T5800] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 59.574086][ T5800] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 59.574101][ T5800] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 59.574117][ T5800] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 59.939400][ T6439] IPVS: starting estimator thread 0... [ 59.982432][ T7087] fuse: Bad value for 'fd' [ 59.985196][ T7091] fuse: Bad value for 'fd' [ 59.993039][ T7093] vcan0: tx address claim with dest, not broadcast [ 59.999654][ T7093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3856 sclass=netlink_route_socket pid=7093 comm=syz.0.321 [ 59.999861][ T7094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3856 sclass=netlink_route_socket pid=7094 comm=syz.0.321 [ 60.043366][ T7084] IPVS: using max 31 ests per chain, 74400 per kthread [ 60.053626][ T7099] No control pipe specified [ 60.093715][ T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 60.093742][ T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 60.093758][ T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 60.093772][ T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 60.603346][ T5800] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 60.603376][ T5800] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 61.069990][ T7109] netlink: 28 bytes leftover after parsing attributes in process `syz.0.326'. [ 61.130978][ T7129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=7129 comm=syz.3.330 [ 61.131185][ T7129] netlink: 20 bytes leftover after parsing attributes in process `syz.3.330'. [ 61.585763][ T7164] netlink: 'syz.3.335': attribute type 25 has an invalid length. [ 61.585777][ T7164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.335'. [ 61.607369][ T7164] netlink: 'syz.3.335': attribute type 25 has an invalid length. [ 61.607388][ T7164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.335'. [ 61.623932][ T5800] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.623971][ T5800] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.624000][ T5800] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.624027][ T5800] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.635826][ T7141] cgroup: fork rejected by pids controller in /syz0 [ 61.804685][ T5726] Bluetooth: hci4: command 0x1003 tx timeout [ 61.806392][ T5734] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 61.971945][ T5816] hid-sensor-hub 0003:1234:5678.0003: hidraw1: USB HID v0.01 Device [syz0] on syz0 [ 62.085620][ T7194] fido_id[7194]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 62.142510][ T7204] overlayfs: failed to resolve './file2': -2 [ 62.149992][ T7208] GUP no longer grows the stack in syz.0.342 (7208): 200000007000-20000000a000 (200000004000) [ 62.150019][ T7208] CPU: 0 UID: 0 PID: 7208 Comm: syz.0.342 Not tainted syzkaller #0 PREEMPT(full) [ 62.150032][ T7208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.150038][ T7208] Call Trace: [ 62.150051][ T7208] [ 62.150056][ T7208] dump_stack_lvl+0x100/0x190 [ 62.150085][ T7208] gup_vma_lookup.cold+0x83/0x96 [ 62.150105][ T7208] __get_user_pages+0x252/0x2c30 [ 62.150127][ T7208] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 62.150145][ T7208] ? __pfx___get_user_pages+0x10/0x10 [ 62.150161][ T7208] ? __pfx_down_read_killable+0x10/0x10 [ 62.150183][ T7208] __gup_longterm_locked+0x87d/0x16f0 [ 62.150204][ T7208] ? __pfx___gup_longterm_locked+0x10/0x10 [ 62.150219][ T7208] ? lock_acquire+0x1d1/0x380 [ 62.150232][ T7208] ? gup_fast_fallback+0x946/0x2790 [ 62.150253][ T7208] gup_fast_fallback+0x16dc/0x2790 [ 62.150281][ T7208] ? __pfx_gup_fast_fallback+0x10/0x10 [ 62.150299][ T7208] ? __lock_acquire+0x5c0/0x1f40 [ 62.150313][ T7208] ? rcu_is_watching+0x13/0xc0 [ 62.150331][ T7208] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 62.150348][ T7208] get_user_pages_fast+0xa7/0xf0 [ 62.150363][ T7208] ? __pfx_get_user_pages_fast+0x10/0x10 [ 62.150378][ T7208] ? lock_acquire+0x1d1/0x380 [ 62.150395][ T7208] ? pipe_lock+0x69/0x80 [ 62.150414][ T7208] __iov_iter_get_pages_alloc+0x8f2/0x1f20 [ 62.150435][ T7208] ? __mutex_lock+0x26c/0x1bd0 [ 62.150453][ T7208] ? pipe_lock+0x69/0x80 [ 62.150470][ T7208] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 62.150489][ T7208] ? __pfx___mutex_lock+0x10/0x10 [ 62.150505][ T7208] ? __fget_files+0x34/0x3d0 [ 62.150521][ T7208] ? import_ubuf+0x1b6/0x220 [ 62.150542][ T7208] iov_iter_get_pages2+0xa3/0x100 [ 62.150558][ T7208] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 62.150575][ T7208] ? wait_for_space+0x2ca/0x3b0 [ 62.150595][ T7208] __do_sys_vmsplice+0x7dd/0x13c0 [ 62.150610][ T7208] ? __pfx_futex_hash+0x10/0x10 [ 62.150626][ T7208] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 62.150641][ T7208] ? __pfx_futex_wait+0x10/0x10 [ 62.150679][ T7208] ? do_syscall_64+0x123/0x790 [ 62.150695][ T7208] do_syscall_64+0x123/0x790 [ 62.150712][ T7208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.150724][ T7208] RIP: 0033:0x7f3ea559e559 [ 62.150733][ T7208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.150744][ T7208] RSP: 002b:00007f3ea63ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 62.150756][ T7208] RAX: ffffffffffffffda RBX: 00007f3ea5825fa0 RCX: 00007f3ea559e559 [ 62.150763][ T7208] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000006 [ 62.150770][ T7208] RBP: 00007f3ea5635ab8 R08: 0000000000000000 R09: 0000000000000000 [ 62.150776][ T7208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.150782][ T7208] R13: 00007f3ea5826038 R14: 00007f3ea5825fa0 R15: 00007ffe4ee18268 [ 62.150797][ T7208] [ 62.304700][ T7218] netlink: 112 bytes leftover after parsing attributes in process `syz.1.345'. [ 62.321891][ T7224] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 62.377097][ T7227] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.348'. [ 62.485112][ T7249] bridge4: entered promiscuous mode [ 62.485133][ T7249] bridge4: entered allmulticast mode [ 62.562464][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 62.562482][ T42] audit: type=1400 audit(1792385355.203:505): avc: denied { setopt } for pid=7256 comm="syz.3.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.576786][ T7257] vcan0: tx address claim with different name [ 62.613903][ T42] audit: type=1400 audit(1792385355.263:506): avc: denied { load_policy } for pid=7256 comm="syz.3.355" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 62.613982][ T7258] SELinux: policydb version 0 does not match my version range 15-35 [ 62.614022][ T7258] SELinux: failed to load policy [ 62.695565][ T7264] msdos: Unknown parameter ':-' [ 62.758494][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.358'. [ 62.797034][ T42] audit: type=1400 audit(1792385355.443:507): avc: denied { connect } for pid=7268 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.058819][ T42] audit: type=1400 audit(1792385355.703:508): avc: denied { append } for pid=7289 comm="syz.3.365" name="001" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 63.355155][ T7296] netlink: 136 bytes leftover after parsing attributes in process `syz.3.367'. [ 63.355410][ T7296] netlink: 136 bytes leftover after parsing attributes in process `syz.3.367'. [ 63.355628][ T7296] netlink: 136 bytes leftover after parsing attributes in process `syz.3.367'. [ 63.359739][ T7296] netlink: 136 bytes leftover after parsing attributes in process `syz.3.367'. [ 63.359914][ T7296] netlink: 136 bytes leftover after parsing attributes in process `syz.3.367'. [ 63.360079][ T7296] netlink: 136 bytes leftover after parsing attributes in process `syz.3.367'. [ 63.497936][ T7303] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 63.529330][ T7303] bond2: Invalid ad_actor_system MAC address. [ 63.529344][ T7303] bond2: option ad_actor_system: invalid value (65541) [ 63.550238][ T7303] bond2 (unregistering): Released all slaves [ 64.060567][ T7326] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 64.088821][ T42] audit: type=1400 audit(1792385356.733:509): avc: denied { unmount } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 64.127101][ T42] audit: type=1400 audit(1792385356.773:510): avc: denied { read } for pid=7334 comm="syz.0.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.166143][ T7341] FAULT_INJECTION: forcing a failure. [ 64.166143][ T7341] name failslab, interval 1, probability 0, space 0, times 0 [ 64.166164][ T7341] CPU: 2 UID: 0 PID: 7341 Comm: syz.3.381 Not tainted syzkaller #0 PREEMPT(full) [ 64.166176][ T7341] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.166183][ T7341] Call Trace: [ 64.166187][ T7341] [ 64.166192][ T7341] dump_stack_lvl+0x100/0x190 [ 64.166213][ T7341] should_fail_ex.cold+0x5/0xa [ 64.166229][ T7341] should_failslab+0xc2/0x120 [ 64.166246][ T7341] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 64.166268][ T7341] ? sock_alloc_inode+0x26/0x2c0 [ 64.166292][ T7341] ? __pfx_sock_alloc_inode+0x10/0x10 [ 64.166307][ T7341] sock_alloc_inode+0x26/0x2c0 [ 64.166321][ T7341] ? __pfx_sock_alloc_inode+0x10/0x10 [ 64.166335][ T7341] alloc_inode+0x68/0x250 [ 64.166349][ T7341] sock_alloc+0x44/0x280 [ 64.166363][ T7341] ? security_socket_create+0x7f/0x250 [ 64.166378][ T7341] __sock_create+0xc2/0x860 [ 64.166396][ T7341] __sys_socket+0x14d/0x260 [ 64.166411][ T7341] ? fput+0x7c/0x100 [ 64.166427][ T7341] ? __pfx___sys_socket+0x10/0x10 [ 64.166442][ T7341] ? ksys_write+0x1ac/0x250 [ 64.166455][ T7341] ? __pfx_ksys_write+0x10/0x10 [ 64.166471][ T7341] __x64_sys_socket+0x72/0xb0 [ 64.166485][ T7341] ? lockdep_hardirqs_on+0x7d/0x110 [ 64.166502][ T7341] do_syscall_64+0x123/0x790 [ 64.166520][ T7341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.166532][ T7341] RIP: 0033:0x7f569e39e559 [ 64.166542][ T7341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.166552][ T7341] RSP: 002b:00007f569f1bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 64.166564][ T7341] RAX: ffffffffffffffda RBX: 00007f569e625fa0 RCX: 00007f569e39e559 [ 64.166572][ T7341] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 64.166578][ T7341] RBP: 00007f569e435ab8 R08: 0000000000000000 R09: 0000000000000000 [ 64.166585][ T7341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.166591][ T7341] R13: 00007f569e626038 R14: 00007f569e625fa0 R15: 00007ffe7e45a198 [ 64.166606][ T7341] [ 64.168608][ T7341] netlink: 'syz.3.381': attribute type 17 has an invalid length. [ 64.464070][ T7364] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7364 comm=syz.3.388 [ 64.501251][ T42] audit: type=1400 audit(1792385357.143:511): avc: denied { map } for pid=7371 comm="syz.0.389" path="socket:[17039]" dev="sockfs" ino=17039 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 64.504816][ T42] audit: type=1400 audit(1792385357.153:512): avc: denied { cmd } for pid=7371 comm="iou-wrk-7372" path="socket:[17039]" dev="sockfs" ino=17039 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 64.703279][ T5800] net_ratelimit: 31 callbacks suppressed [ 64.703294][ T5800] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 64.703307][ T5800] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 64.703317][ T5800] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 64.703327][ T5800] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 64.760673][ T42] audit: type=1400 audit(1792385357.403:513): avc: denied { getopt } for pid=7380 comm="syz.3.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 64.804109][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.805490][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.805556][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.805620][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.805680][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.805741][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.805801][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.805893][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.805954][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.806015][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.806189][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.807911][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.808843][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.808931][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.809010][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.809070][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.809130][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.809991][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.810117][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.810180][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.810241][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.810302][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.810363][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.810429][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.811023][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.811102][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.811161][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.811234][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.811313][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.811372][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.811431][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.811489][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.811547][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.811608][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.811691][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.811770][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.811834][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.811892][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.811951][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.812009][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.812070][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.812150][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.812227][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.812460][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.812567][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.820861][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.820929][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.820990][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.821049][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.821109][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.821168][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.821229][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.821290][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.821349][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.821418][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.821479][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.821563][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.821626][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.821731][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.821834][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.821917][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.821994][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.822053][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.822113][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.822202][ T7385] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.860352][ T42] audit: type=1400 audit(1792385357.503:514): avc: denied { connect } for pid=7388 comm="syz.0.394" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.213351][ T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 65.213372][ T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 65.213383][ T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 65.213394][ T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 65.613239][ T1828] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 65.643399][ T7416] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 65.723396][ T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 65.723425][ T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 65.755169][ T1828] usb 6-1: device descriptor read/64, error -71 [ 66.013292][ T1828] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 66.143624][ T1828] usb 6-1: device descriptor read/64, error -71 [ 66.206463][ T7438] ublk0: read batch cmd buffer failed [ 66.206542][ T7438] ublk0: read batch cmd buffer failed [ 66.216125][ T7438] ublk0: read batch cmd buffer failed [ 66.216202][ T7438] ublk0: read batch cmd buffer failed [ 66.265717][ T1828] usb usb6-port1: attempt power cycle [ 66.361246][ T6440] Bluetooth: hci4: Frame reassembly failed (-84) [ 66.365509][ T7454] FAULT_INJECTION: forcing a failure. [ 66.365509][ T7454] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 66.365540][ T7454] CPU: 1 UID: 0 PID: 7454 Comm: syz.3.416 Not tainted syzkaller #0 PREEMPT(full) [ 66.365562][ T7454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.365574][ T7454] Call Trace: [ 66.365581][ T7454] [ 66.365589][ T7454] dump_stack_lvl+0x100/0x190 [ 66.365647][ T7454] should_fail_ex.cold+0x5/0xa [ 66.365675][ T7454] _copy_to_user+0x32/0xd0 [ 66.365705][ T7454] put_timespec64+0xb5/0x130 [ 66.365727][ T7454] ? __pfx_put_timespec64+0x10/0x10 [ 66.365750][ T7454] ? ktime_get_real_ts64+0x213/0x400 [ 66.365780][ T7454] __x64_sys_clock_gettime+0x1d3/0x270 [ 66.365802][ T7454] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 66.365825][ T7454] ? __seccomp_permit_syscall+0x204/0x2e0 [ 66.365848][ T7454] do_syscall_64+0x123/0x790 [ 66.365879][ T7454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.365900][ T7454] RIP: 0033:0x7f569e39e559 [ 66.365917][ T7454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.365935][ T7454] RSP: 002b:00007f569f1bf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 66.365955][ T7454] RAX: ffffffffffffffda RBX: 00007f569e625fa0 RCX: 00007f569e39e559 [ 66.365968][ T7454] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 66.365981][ T7454] RBP: 00007f569e435ab8 R08: 0000000000000000 R09: 0000000000000000 [ 66.365992][ T7454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.366002][ T7454] R13: 00007f569e626038 R14: 00007f569e625fa0 R15: 00007ffe7e45a198 [ 66.366029][ T7454] [ 66.535596][ T7468] No such timeout policy "syz1" [ 66.587013][ T7474] overlayfs: failed to clone upperpath [ 66.613293][ T1828] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 66.633718][ T1828] usb 6-1: device descriptor read/8, error -71 [ 66.781567][ T7486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4112 sclass=netlink_route_socket pid=7486 comm=syz.0.426 [ 66.883340][ T1828] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 66.904668][ T1828] usb 6-1: device descriptor read/8, error -71 [ 67.014018][ T1828] usb usb6-port1: unable to enumerate USB device [ 68.240863][ T7494] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 68.258883][ T7494] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.299966][ T7495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=7495 comm=syz.0.429 [ 68.300130][ T7495] __nla_validate_parse: 95 callbacks suppressed [ 68.300142][ T7495] netlink: 20 bytes leftover after parsing attributes in process `syz.0.429'. [ 68.424360][ T7497] netlink: 20 bytes leftover after parsing attributes in process `syz.1.430'. [ 68.435581][ T5734] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 68.590873][ T7510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.435'. [ 68.822030][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 68.822043][ T42] audit: type=1400 audit(1792385361.463:521): avc: denied { ioctl } for pid=7523 comm="syz.0.439" path="socket:[19384]" dev="sockfs" ino=19384 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 68.822515][ T42] audit: type=1400 audit(1792385361.463:522): avc: denied { getopt } for pid=7523 comm="syz.0.439" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.822779][ T42] audit: type=1400 audit(1792385361.463:523): avc: denied { setopt } for pid=7523 comm="syz.0.439" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 68.824456][ T42] audit: type=1400 audit(1792385361.473:524): avc: denied { write } for pid=7523 comm="syz.0.439" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 68.825782][ T7524] netlink: 44 bytes leftover after parsing attributes in process `syz.0.439'. [ 68.866079][ T7526] overlayfs: failed to clone upperpath [ 68.921801][ T7531] geneve2: entered promiscuous mode [ 68.921818][ T7531] geneve2: entered allmulticast mode [ 68.924697][ T5726] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 68.924732][ T5726] Bluetooth: hci2: Injecting HCI hardware error event [ 68.925572][ T5726] Bluetooth: hci2: hardware error 0x00 [ 68.943305][ T13] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 68.943342][ T13] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 68.943361][ T13] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 68.955593][ T7533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.443'. [ 69.049980][ T42] audit: type=1400 audit(1792385361.693:525): avc: denied { bind } for pid=7537 comm="syz.0.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.050925][ T7540] IPVS: length: 174 != 8 [ 69.140993][ T42] audit: type=1400 audit(1792385361.783:526): avc: denied { write } for pid=7545 comm="syz.1.446" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.178047][ T7550] netlink: 16 bytes leftover after parsing attributes in process `syz.1.448'. [ 69.195191][ T7550] netlink: 24 bytes leftover after parsing attributes in process `syz.1.448'. [ 69.215900][ T42] audit: type=1400 audit(1792385361.863:527): avc: denied { getopt } for pid=7551 comm="syz.3.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.221490][ T7553] netlink: 24 bytes leftover after parsing attributes in process `syz.0.447'. [ 69.318491][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.451'. [ 69.318522][ T7556] netlink: 20 bytes leftover after parsing attributes in process `syz.3.451'. [ 69.636684][ T42] audit: type=1400 audit(1792385362.283:528): avc: denied { accept } for pid=7564 comm="syz.1.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.823986][ T13] net_ratelimit: 30 callbacks suppressed [ 69.824004][ T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 69.824023][ T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 69.824039][ T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 69.824055][ T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 70.333892][ T5800] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 70.333924][ T5800] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 70.333943][ T5800] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 70.333962][ T5800] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 70.748880][ T42] audit: type=1400 audit(1792385363.393:529): avc: denied { execute } for pid=7588 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 70.749385][ T42] audit: type=1400 audit(1792385363.393:530): avc: denied { execute_no_trans } for pid=7588 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 70.775714][ T7589] No control pipe specified [ 70.847367][ T5736] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.850211][ T5736] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.850748][ T5736] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.851156][ T5736] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.851417][ T5736] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.854507][ T5800] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 70.854530][ T5800] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 70.993297][ T5726] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 71.014082][ T7596] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.141529][ T5800] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.156757][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.156813][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.161508][ T851] cfg80211: failed to load regulatory.db [ 71.223924][ T5800] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.236321][ T7609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64768 sclass=netlink_route_socket pid=7609 comm=syz.1.464 [ 71.285819][ T5800] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.329115][ T5800] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.368029][ T7596] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.368115][ T7596] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.368178][ T7596] bridge_slave_0: entered allmulticast mode [ 71.368936][ T7596] bridge_slave_0: entered promiscuous mode [ 71.379029][ T7596] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.379100][ T7596] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.379159][ T7596] bridge_slave_1: entered allmulticast mode [ 71.379871][ T7596] bridge_slave_1: entered promiscuous mode [ 71.400574][ T7596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.401964][ T7596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.427450][ T7596] team0: Port device team_slave_0 added [ 71.430714][ T7596] team0: Port device team_slave_1 added [ 71.450133][ T7596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.450144][ T7596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.450157][ T7596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.451156][ T7596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.451164][ T7596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.451190][ T7596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.511392][ T7596] hsr_slave_0: entered promiscuous mode [ 71.511855][ T7596] hsr_slave_1: entered promiscuous mode [ 71.512505][ T7596] debugfs: 'hsr0' already exists in 'hsr' [ 71.512517][ T7596] Cannot create hsr debugfs directory [ 71.546618][ T5800] bridge_slave_1: left allmulticast mode [ 71.546638][ T5800] bridge_slave_1: left promiscuous mode [ 71.547503][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.550697][ T5800] : left allmulticast mode [ 71.550710][ T5800] : left promiscuous mode [ 71.550796][ T5800] bridge0: port 1() entered disabled state [ 71.683808][ T5800] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.685777][ T5800] bond_slave_0: left allmulticast mode [ 71.690963][ T5800] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.693646][ T5800] bond_slave_1: left allmulticast mode [ 71.694627][ T5800] bond0 (unregistering): Released all slaves [ 71.772781][ T5800] : left promiscuous mode [ 71.925027][ T7596] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.946736][ T7596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.950322][ T7596] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.975048][ T7596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.977159][ T7596] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.994275][ T7596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.994691][ T7596] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.005241][ T7596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.020640][ T7640] gretap1: entered allmulticast mode [ 72.027283][ T7640] team0: Port device gretap1 added [ 72.054720][ T7640] bridge0: port 3(team0) entered blocking state [ 72.054793][ T7640] bridge0: port 3(team0) entered disabled state [ 72.054958][ T7640] team0: entered allmulticast mode [ 72.054968][ T7640] team_slave_0: entered allmulticast mode [ 72.054986][ T7640] team_slave_1: entered allmulticast mode [ 72.057207][ T7640] team0: entered promiscuous mode [ 72.057225][ T7640] team_slave_0: entered promiscuous mode [ 72.057373][ T7640] team_slave_1: entered promiscuous mode [ 72.057501][ T7640] gretap1: entered promiscuous mode [ 72.060483][ T7640] bridge0: port 3(team0) entered blocking state [ 72.060570][ T7640] bridge0: port 3(team0) entered forwarding state [ 72.081264][ T5442] 8021q: adding VLAN 0 to HW filter on device eth2 [ 72.210588][ T7656] bond1: entered promiscuous mode [ 72.210620][ T7656] bond1: entered allmulticast mode [ 72.210793][ T7656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.219264][ T7596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.234858][ T7596] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.241970][ T6442] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.242018][ T6442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.247815][ T6453] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.247859][ T6453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.318047][ T7596] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.352166][ T7674] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.364810][ T7675] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 72.364826][ T7675] overlayfs: failed to set xattr on upper [ 72.364830][ T7675] overlayfs: ...falling back to redirect_dir=nofollow. [ 72.364834][ T7675] overlayfs: ...falling back to index=off. [ 72.364837][ T7675] overlayfs: ...falling back to uuid=null. [ 72.371719][ T5800] hsr_slave_0: left promiscuous mode [ 72.376461][ T5800] hsr_slave_1: left promiscuous mode [ 72.376870][ T5800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.376887][ T5800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.382244][ T5800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.382255][ T5800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.403667][ T5800] veth1_macvtap: left promiscuous mode [ 72.403698][ T5800] veth0_macvtap: left promiscuous mode [ 72.403747][ T5800] veth1_vlan: left promiscuous mode [ 72.403784][ T5800] veth0_vlan: left promiscuous mode [ 72.539977][ T5800] team0 (unregistering): Port device team_slave_1 removed [ 72.547035][ T5800] team0 (unregistering): Port device team_slave_0 removed [ 72.616862][ T5442] 8021q: adding VLAN 0 to HW filter on device eth3 [ 72.636515][ T7698] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 72.682221][ T7696] 8021q: adding VLAN 0 to HW filter on device bond2 [ 72.737159][ T7696] bond2: (slave hsr0): The slave device specified does not support setting the MAC address [ 72.737719][ T7696] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 72.737731][ T7696] bond2: (slave hsr0): Error -22 calling dev_set_mtu [ 72.742769][ T7708] rnbd_client L213: map_device: Parameters missing [ 72.753433][ T5726] Bluetooth: hci0: command tx timeout [ 72.845525][ T7596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.881945][ T5442] 8021q: adding VLAN 0 to HW filter on device eth4 [ 72.914772][ T5726] Bluetooth: hci4: command tx timeout [ 72.980586][ T7596] veth0_vlan: entered promiscuous mode [ 72.986563][ T7596] veth1_vlan: entered promiscuous mode [ 72.999705][ T7596] veth0_macvtap: entered promiscuous mode [ 73.001860][ T7596] veth1_macvtap: entered promiscuous mode [ 73.011707][ T7596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.020904][ T5442] 8021q: adding VLAN 0 to HW filter on device eth5 [ 73.024378][ T7596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.045283][ T5800] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.045438][ T5800] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.045458][ T5800] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.045475][ T5800] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.070358][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.070372][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.090593][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.090607][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.644361][ T7765] netlink: 'syz.1.491': attribute type 12 has an invalid length. [ 73.646643][ T7765] netlink: 'syz.1.491': attribute type 12 has an invalid length. [ 73.949390][ T7772] __nla_validate_parse: 3 callbacks suppressed [ 73.949411][ T7772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.493'. [ 74.025475][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 74.025488][ T42] audit: type=1400 audit(1792385366.673:558): avc: denied { name_connect } for pid=7777 comm="syz.0.494" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 74.216466][ T42] audit: type=1400 audit(1792385366.863:559): avc: denied { connect } for pid=7801 comm="syz.4.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 74.253822][ T7806] --map-set only usable from mangle table [ 74.360585][ T7819] netlink: 'syz.4.506': attribute type 14 has an invalid length. [ 74.802057][ T42] audit: type=1400 audit(1792385367.443:560): avc: denied { create } for pid=7836 comm="syz.4.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 74.802850][ T42] audit: type=1400 audit(1792385367.443:561): avc: denied { setopt } for pid=7836 comm="syz.4.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 74.819187][ T7837] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 74.933362][ T7639] net_ratelimit: 30 callbacks suppressed [ 74.933424][ T7639] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 74.933440][ T7639] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 74.933451][ T7639] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 74.933461][ T7639] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 74.993243][ T5726] Bluetooth: hci4: command tx timeout [ 75.049705][ T7850] netlink: 112 bytes leftover after parsing attributes in process `syz.3.513'. @ [ 75.068936][ T7850] netlink: 'syz.3.513': attribute type 1 has an invalid length. [ 75.069269][ T7850] netlink: 36 bytes leftover after parsing attributes in process `syz.3.513'. [ 75.118047][ T7852] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 75.119167][ T7852] VFS: Can't find a romfs filesystem on dev nullb0. [ 75.119167][ T7852] [ 75.120911][ T7852] could not open pipe file descriptor [ 75.154352][ T57] bridge0: entered promiscuous mode [ 75.254174][ T42] audit: type=1400 audit(1792385367.903:562): avc: denied { setopt } for pid=7860 comm="syz.1.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.318692][ T42] audit: type=1400 audit(1792385367.963:563): avc: denied { create } for pid=7876 comm="syz.3.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 75.319206][ T42] audit: type=1400 audit(1792385367.963:564): avc: denied { getopt } for pid=7876 comm="syz.3.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 75.320381][ T7878] netlink: Invalid conntrack timeout [ 75.320395][ T7878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.444846][ T7639] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 75.444868][ T7639] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 75.444879][ T7639] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 75.444890][ T7639] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 75.454240][ T42] audit: type=1400 audit(1792385368.103:565): avc: denied { accept } for pid=7886 comm="syz.3.526" path=2F3131312FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 75.575750][ T7896] netlink: 28 bytes leftover after parsing attributes in process `syz.3.529'. [ 75.588690][ T42] audit: type=1400 audit(1792385368.233:566): avc: denied { write } for pid=7895 comm="syz.3.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.794628][ T42] audit: type=1400 audit(1792385368.443:567): avc: denied { bind } for pid=7915 comm="syz.3.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 76.332142][ T7935] Mount JFS Failure: -22 [ 76.332155][ T7935] jfs_mount failed w/return code = -22 [ 76.381983][ T7941] libceph: resolve '1.2.0.Bi1' (ret=-3): failed [ 76.417464][ T7941] ------------[ cut here ]------------ [ 76.417476][ T7941] kernel BUG at net/ceph/mon_client.c:211! [ 76.417492][ T7941] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 76.423385][ T7941] CPU: 2 UID: 0 PID: 7941 Comm: syz.0.542 Not tainted syzkaller #0 PREEMPT(full) [ 76.426897][ T7941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.429856][ T7941] RIP: 0010:__open_session+0x60f/0x740 [ 76.431504][ T7941] Code: f6 44 89 e7 e8 c2 8c 25 fa 89 c5 e9 2b fb ff ff e8 36 a0 7a f6 c7 83 b4 09 00 00 0a 00 00 00 e9 22 fc ff ff e8 22 a0 7a f6 90 <0f> 0b e8 5a e2 ee f6 e9 7b fa ff ff 4c 89 f7 e8 4d e2 ee f6 e9 16 [ 76.439116][ T7941] RSP: 0018:ffffc90003597be0 EFLAGS: 00010283 [ 76.441631][ T7941] RAX: 000000000000663e RBX: ffff888039244290 RCX: ffffc9000461a000 [ 76.442093][ T7950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.543'. [ 76.442969][ T7950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7950 comm=syz.3.543 [ 76.453389][ T7941] RDX: 0000000000080000 RSI: ffffffff8b91b7ce RDI: ffff88810b878000 [ 76.456649][ T7941] RBP: ffff88802c1ca500 R08: 0000000000000005 R09: 0000000000000000 [ 76.459908][ T7941] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 76.463174][ T7941] R13: 00000000ffffffff R14: ffff888039244400 R15: ffff888039244298 [ 76.466502][ T7941] FS: 00007f3ea63ad6c0(0000) GS:ffff8880d4b46000(0000) knlGS:0000000000000000 [ 76.470153][ T7941] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.472905][ T7941] CR2: 0000001b2f423ffc CR3: 000000001578f000 CR4: 0000000000352ef0 [ 76.476195][ T7941] Call Trace: [ 76.477608][ T7941] [ 76.478859][ T7941] ? __ceph_monc_want_map+0x189/0x360 [ 76.481113][ T7941] ceph_monc_open_session+0x46/0x60 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 76.483283][ T7941] __ceph_open_session+0x135/0x590 [ 76.485517][ T7941] ? __pfx___mutex_lock+0x10/0x10 [ 76.487641][ T7941] ? super_setup_bdi_name+0x1a3/0x250 [ 76.489870][ T7941] ? __pfx___ceph_open_session+0x10/0x10 [ 76.492235][ T7941] ? __pfx_woken_wake_function+0x10/0x10 [ 76.494580][ T7941] ceph_get_tree+0xd98/0x1fd0 [ 76.496556][ T7941] ? security_capable+0x80/0x260 [ 76.498634][ T7941] vfs_get_tree+0x92/0x320 [ 76.500532][ T7941] vfs_cmd_create+0xd7/0x2a0 [ 76.502484][ T7941] __do_sys_fsconfig+0x55a/0xcb0 [ 76.504371][ T7941] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 76.506092][ T7941] do_syscall_64+0x123/0x790 [ 76.507647][ T7941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.509510][ T7941] RIP: 0033:0x7f3ea559e559 [ 76.510924][ T7941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.517084][ T7941] RSP: 002b:00007f3ea63ad028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 76.519714][ T7941] RAX: ffffffffffffffda RBX: 00007f3ea5825fa0 RCX: 00007f3ea559e559 [ 76.522336][ T7941] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 76.524829][ T7941] RBP: 00007f3ea5635ab8 R08: 0000000000000000 R09: 0000000000000000 [ 76.527307][ T7941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.529787][ T7941] R13: 00007f3ea5826038 R14: 00007f3ea5825fa0 R15: 00007ffe4ee18268 [ 76.532320][ T7941] [ 76.533312][ T7941] Modules linked in: [ 76.535086][ T7941] ---[ end trace 0000000000000000 ]--- [ 76.536933][ T7941] RIP: 0010:__open_session+0x60f/0x740 [ 76.536957][ T7941] Code: f6 44 89 e7 e8 c2 8c 25 fa 89 c5 e9 2b fb ff ff e8 36 a0 7a f6 c7 83 b4 09 00 00 0a 00 00 00 e9 22 fc ff ff e8 22 a0 7a f6 90 <0f> 0b e8 5a e2 ee f6 e9 7b fa ff ff 4c 89 f7 e8 4d e2 ee f6 e9 16 [ 76.536969][ T7941] RSP: 0018:ffffc90003597be0 EFLAGS: 00010283 [ 76.536979][ T7941] RAX: 000000000000663e RBX: ffff888039244290 RCX: ffffc9000461a000 [ 76.536987][ T7941] RDX: 0000000000080000 RSI: ffffffff8b91b7ce RDI: ffff88810b878000 [ 76.536995][ T7941] RBP: ffff88802c1ca500 R08: 0000000000000005 R09: 0000000000000000 [ 76.537002][ T7941] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 76.537009][ T7941] R13: 00000000ffffffff R14: ffff888039244400 R15: ffff888039244298 [ 76.537017][ T7941] FS: 00007f3ea63ad6c0(0000) GS:ffff8880d4b46000(0000) knlGS:0000000000000000 [ 76.537041][ T7941] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.537050][ T7941] CR2: 0000001b2f423ffc CR3: 000000001578f000 CR4: 0000000000352ef0 [ 76.537058][ T7941] Kernel panic - not syncing: Fatal exception [ 76.568907][ T7941] Kernel Offset: disabled [ 76.570308][ T7941] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:49:29 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff888021404b02 RCX=ffffffff8bcf7c47 RDX=0000000000000201 RSI=000000000000003f RDI=ffff88802b75a580 RBP=0000000000000000 RSP=ffffc90005aff938 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=dffffc0000000000 R14=0000000000000002 R15=ffffffff8fc92ee8 RIP=ffffffff820c5120 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4946000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe576bebc40 CR3=000000011bc37000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe57795d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd5d1b246 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd5d1b246 00007ffcd5d1b24c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe576c360e2 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe576c3611c ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe576c36280 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe576c3610e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe576df6600 00007fe576df65e0 00007fe576df65e8 00007fe576df6618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe576df65f8 00007fe576df65c8 00007fe576df6600 00007fe576df65e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000038 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffff8880001e3150 RBX=0000000000000001 RCX=ffffffff81e7db38 RDX=1ffff1100003c62a RSI=0000000000000000 RDI=ffff8880001e3168 RBP=ffffc90002727140 RSP=ffffc90002727010 R8 =0000000000000001 R9 =fffff520004e4df0 R10=0000000000000003 R11=000000000000763b R12=dffffc0000000000 R13=ffff888044ed7000 R14=ffff8880274fab60 R15=ffff888044ed8000 RIP=ffffffff8536d670 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4a46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe5779f7d58 CR3=0000000026f3c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000227 0000001000000000 0000000000000000 0000000000000014 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0403 8003180800061000 201000060075f832 0000125f00000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000327a797300 0300090000000031 7a79730001000907 00000a0000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000001010a0300 00002c0000000031 7a79730001000902 0000004002000807 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000a0000000000 00000000030a0000 0000280a00000500 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100000001401 de080c80030c8004 05800305800403a0 030008000390030f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 001bb8030008001b b0030fffffffffff ff041ba003000800 1b98030008001b90 ZMM25=3d657bb13d657bb1 3d657bb13d657bb1 3d657bb13d657bb1 3d657bb13d657bb1 3d657bb13d657bb1 3d657bb13d657bb1 3d657bb13d657bb1 3d657bb13d657bb1 ZMM26=bd9ca4e4bd9ca4e4 bd9ca4e4bd9ca4e4 bd9ca4e4bd9ca4e4 bd9ca4e4bd9ca4e4 bd9ca4e4bd9ca4e4 bd9ca4e4bd9ca4e4 bd9ca4e4bd9ca4e4 bd9ca4e4bd9ca4e4 ZMM27=70ed8e6070ed8e60 70ed8e6070ed8e60 70ed8e6070ed8e60 70ed8e6070ed8e60 70ed8e6070ed8e60 70ed8e6070ed8e60 70ed8e6070ed8e60 70ed8e6070ed8e60 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=9203000092030000 9203000092030000 9203000092030000 9203000092030000 9203000092030000 9203000092030000 9203000092030000 9203000092030000 info registers vcpu 2 CPU#2 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85b2d110 RDI=ffffffff9cc7e6a0 RBP=ffffffff9cc7e660 RSP=ffffc90003597300 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552032203a555043 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff398fd29 R15=dffffc0000000000 RIP=ffffffff85b2d137 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f3ea63ad6c0 ffffffff 00c00000 GS =0000 ffff8880d4b46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2f423ffc CR3=000000001578f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0088000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055fbfc421600 000055fbfc421600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd2f612390 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f73666a205d3533 393754205b5d3535 313233332e363720 20205b203a6c656e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313d657669737369 6d7265702074656b 636f735f63666e3d 7373616c63742074 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f6d64617379733a 725f6d6461737973 3a746f6f723d7478 65746e6f63742074 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f6d64617379733a 725f6d6461737973 3a746f6f723d7478 65746e6f63732022 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3333352e332e7a79 73223d6d6d6f6320 353139373d646970 2020726f66207d20 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000002 RCX=ffffffff81ff9393 RDX=0000000000000002 RSI=0000000000000000 RDI=ffff88803d402580 RBP=ffff88806a443ce0 RSP=ffffc90003da7408 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=1ffffffff1fbefd1 R12=ffffed1007a80763 R13=0000000000000003 R14=ffffed100d48879d R15=0000000000000001 RIP=ffffffff820c50d7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4c46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd203b57e20 CR3=0000000050541000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000f0000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737570635f657669 7463656666652e74 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4ee18756 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4ee18756 00007ffe4ee1875c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ea56360e2 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ea563611c ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ea5636280 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ea563610e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000